x0) 13:36:34 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80002, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) flistxattr(r3, &(0x7f0000000000)=""/54, 0x36) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000206010200000000000000000a0000000500060000000000090f020073797ab69000ff0f0000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 13:36:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 1096.786382][T10709] FAT-fs (loop3): bogus number of reserved sectors 13:36:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1096.845587][T10709] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1097.030658][T10709] FAT-fs (loop3): bogus number of reserved sectors [ 1097.059335][T10709] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x40200}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x60000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 13:36:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206010300e00e00000000000000000005000400000000000900020073797a3000000000050005000a0000000500010000000011000300686173683a69702c706f7274000000000c00078008000640000000001edef4ed1a0d2ef9973951e1fcbd0d49b2a2dd07fcc8f4f65feb70eaf3bb87fa456109bd5575af90962af25e55dc515b902e28a602fd93a4f46b16c6eabfdb7b3d9b8efd061cc17b224820f5792c883047bc1867686702"], 0x58}}, 0x0) 13:36:35 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xa00000000000000}, 0x0) 13:36:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:35 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a3000000000050005000a000000050001000600000011000300686173683a69702c706f7274000006000c0007800800064002000000"], 0x58}}, 0x0) 13:36:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xb00000000000000}, 0x0) 13:36:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1097.365095][T10751] tc_dump_action: action bad kind 13:36:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) [ 1097.387568][T10750] FAT-fs (loop3): bogus number of reserved sectors [ 1097.417928][T10750] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1097.523436][T10750] FAT-fs (loop3): bogus number of reserved sectors [ 1097.548143][T10750] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:35 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4850) 13:36:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xc00000000000000}, 0x0) 13:36:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x407fe}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) [ 1097.708258][T10777] tc_dump_action: action bad kind [ 1097.724360][T10781] FAT-fs (loop1): bogus number of reserved sectors [ 1097.729202][T10780] FAT-fs (loop3): bogus number of reserved sectors 13:36:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xe00000000000000}, 0x0) 13:36:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) [ 1097.755760][T10780] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1097.777248][T10781] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0xd018ac783faa60ec, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x74}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1cd7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff2d}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 13:36:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1097.873823][T10780] FAT-fs (loop3): bogus number of reserved sectors [ 1097.888875][T10780] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xf00000000000000}, 0x0) 13:36:35 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1097.965648][T10800] tc_dump_action: action bad kind 13:36:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) msgrcv(r2, &(0x7f0000000280)={0x0, ""/238}, 0xf6, 0x0, 0x1800) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) 13:36:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x407ff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1098.017446][T10798] FAT-fs (loop1): bogus number of reserved sectors [ 1098.024484][T10798] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:36 executing program 5: socket$l2tp(0x2, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x1000000000000000}, 0x0) 13:36:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:36 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:36 executing program 5: socket$l2tp(0x2, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) [ 1098.218244][T10817] FAT-fs (loop3): bogus number of reserved sectors [ 1098.225169][T10817] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x1100000000000000}, 0x0) 13:36:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000200)=0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_delroute={0x2c, 0x19, 0x0, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x80, 0x2, 0x0, 0x3, 0xfe, 0x2, 0x100}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r6, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="004c01078400000000000000140012800b0001006d618273656300000400028008000500", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r6, 0x900, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) [ 1098.293765][T10820] FAT-fs (loop1): bogus number of reserved sectors [ 1098.305629][T10817] FAT-fs (loop3): bogus number of reserved sectors [ 1098.328220][T10817] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:36 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1098.339417][T10820] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x40800}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000020601030000000000000000080000054400078008001240000000030500150005000000080008400000002a0800084000000068180002801400024000000000000000000000ffffe000000208000840000000830900020073797a30000000000500010007000000050001000600000011000300686173683a69702c706f7252000000000500040001000000"], 0x90}}, 0x0) 13:36:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x1200000000000000}, 0x0) 13:36:36 executing program 5: socket$l2tp(0x2, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:36 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x1206000000000000}, 0x0) [ 1098.577089][T10842] FAT-fs (loop3): bogus number of reserved sectors [ 1098.595104][T10842] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xffffffff, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:36 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:36 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) [ 1098.672601][T10842] FAT-fs (loop3): bogus number of reserved sectors [ 1098.692443][T10851] FAT-fs (loop1): bogus number of reserved sectors [ 1098.698959][T10851] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1098.713268][T10842] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:36 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x60000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x1300000000000000}, 0x0) 13:36:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040a0c0900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:36 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1098.989965][T10874] FAT-fs (loop3): bogus number of reserved sectors [ 1099.013250][T10874] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1099.024590][T10878] FAT-fs (loop1): bogus number of reserved sectors 13:36:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xfffff000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x2000000000000000}, 0x0) [ 1099.039108][T10878] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 13:36:37 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "40177a", 0x10, 0x21, 0x0, @local, @local, {[], {{0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "4cc475", 0x0, 'G6O'}}}}}}}, 0x0) 13:36:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1099.233313][T10874] FAT-fs (loop3): bogus number of reserved sectors [ 1099.239897][T10874] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x80000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:37 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 13:36:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x4800000000000000}, 0x0) 13:36:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x137143893ddcaf61, 0x0, 0x0, {0x4}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 13:36:37 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1099.532150][T10904] FAT-fs (loop1): bogus number of reserved sectors [ 1099.538859][T10904] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1099.579335][T10915] __nla_validate_parse: 5 callbacks suppressed [ 1099.579346][T10915] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 13:36:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1099.632507][T10917] FAT-fs (loop3): bogus number of reserved sectors 13:36:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x6000000000000000}, 0x0) 13:36:37 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1099.696157][T10917] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1099.793031][T10917] FAT-fs (loop3): bogus number of reserved sectors [ 1099.798363][T10935] FAULT_INJECTION: forcing a failure. [ 1099.798363][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.806414][T10917] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1099.823049][T10927] FAT-fs (loop1): bogus number of reserved sectors [ 1099.830916][T10935] CPU: 0 PID: 10935 Comm: syz-executor.4 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1099.840804][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.850857][T10935] Call Trace: [ 1099.854187][T10935] dump_stack+0x18f/0x20d [ 1099.858526][T10935] should_fail.cold+0x5/0x14 [ 1099.863125][T10935] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1099.868850][T10935] should_failslab+0x5/0xf [ 1099.873282][T10935] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1099.879368][T10935] __kmalloc+0x6f/0x320 [ 1099.883543][T10935] tomoyo_realpath_from_path+0xc3/0x620 [ 1099.889204][T10935] ? tomoyo_profile+0x42/0x50 [ 1099.893901][T10935] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1099.899362][T10935] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1099.905009][T10935] ? tomoyo_execute_permission+0x470/0x470 [ 1099.910828][T10935] ? lock_acquire+0x1f1/0xad0 [ 1099.915513][T10935] ? delayed_put_pid+0x30/0x30 [ 1099.920293][T10935] ? find_held_lock+0x2d/0x110 [ 1099.925092][T10935] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1099.930642][T10935] ? lock_is_held_type+0xb0/0xe0 [ 1099.935586][T10935] ? __fget_files+0x294/0x400 [ 1099.940269][T10935] security_file_ioctl+0x50/0xb0 [ 1099.945220][T10935] ksys_ioctl+0x50/0x180 [ 1099.949468][T10935] __x64_sys_ioctl+0x6f/0xb0 [ 1099.954066][T10935] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1099.959180][T10935] do_syscall_64+0x60/0xe0 [ 1099.963599][T10935] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1099.969489][T10935] RIP: 0033:0x45cba9 [ 1099.973374][T10935] Code: Bad RIP value. [ 1099.977436][T10935] RSP: 002b:00007f1c3cc99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1099.985847][T10935] RAX: ffffffffffffffda RBX: 00000000004e9dc0 RCX: 000000000045cba9 [ 1099.993817][T10935] RDX: 0000000020000380 RSI: 0000000000004c03 RDI: 0000000000000003 [ 1100.001786][T10935] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1100.009757][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1100.017732][T10935] R13: 0000000000000403 R14: 00000000004c6d25 R15: 00007f1c3cc9a6d4 13:36:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x80400}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:38 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d55651cadfc46c38894d59679ed183f2971eb6285272863ee4ed26620c27b9ed5f2cab4f19467e950caadab9e0400000000000000debdb53ec5e9635156c3e1892b276711e3f15b4ef2ff09bf77ec322522c1a53cc39bc3a66e72"], 0x0) 13:36:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 13:36:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x6558000000000000}, 0x0) [ 1100.051513][T10927] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1100.137729][T10943] net_ratelimit: 17 callbacks suppressed [ 1100.137739][T10943] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:36:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x6800000000000000}, 0x0) 13:36:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 13:36:38 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, 0x0, 0x0) [ 1100.214606][T10935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1100.279414][T10946] FAT-fs (loop3): bogus number of reserved sectors [ 1100.305852][T10946] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:38 executing program 4 (fault-call:3 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:36:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x6c00000000000000}, 0x0) 13:36:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 13:36:38 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, 0x0, 0x0) [ 1100.384404][T10957] FAT-fs (loop1): bogus number of reserved sectors [ 1100.393408][T10957] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1100.405005][T10946] FAT-fs (loop3): bogus number of reserved sectors [ 1100.420631][T10946] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xa0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x7400000000000000}, 0x0) 13:36:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 13:36:38 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, 0x0, 0x0) [ 1100.618348][T10971] FAULT_INJECTION: forcing a failure. [ 1100.618348][T10971] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1100.631572][T10971] CPU: 1 PID: 10971 Comm: syz-executor.4 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1100.641478][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.651548][T10971] Call Trace: [ 1100.654863][T10971] dump_stack+0x18f/0x20d [ 1100.659209][T10971] should_fail.cold+0x5/0x14 [ 1100.663790][T10971] ? lock_acquire+0x1f1/0xad0 [ 1100.668503][T10971] __alloc_pages_nodemask+0x1db/0x2a20 [ 1100.673955][T10971] ? is_bpf_text_address+0xa9/0x160 [ 1100.679191][T10971] ? lock_downgrade+0x820/0x820 [ 1100.684039][T10971] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1100.690124][T10971] ? warn_alloc+0x120/0x120 [ 1100.694617][T10971] ? mark_lock+0xbc/0x1710 [ 1100.699028][T10971] ? __lock_acquire+0xc1e/0x56e0 [ 1100.703995][T10971] cache_grow_begin+0x71/0x430 [ 1100.708868][T10971] cache_alloc_refill+0x27b/0x340 [ 1100.713902][T10971] ? lockdep_hardirqs_off+0x66/0xa0 [ 1100.719116][T10971] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1100.724832][T10971] __kmalloc+0x2f5/0x320 [ 1100.729063][T10971] tomoyo_realpath_from_path+0xc3/0x620 [ 1100.734600][T10971] ? tomoyo_profile+0x42/0x50 [ 1100.739267][T10971] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1100.744707][T10971] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1100.750321][T10971] ? tomoyo_execute_permission+0x470/0x470 [ 1100.756117][T10971] ? lock_acquire+0x1f1/0xad0 [ 1100.760798][T10971] ? delayed_put_pid+0x30/0x30 [ 1100.765544][T10971] ? find_held_lock+0x2d/0x110 [ 1100.770310][T10971] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1100.775855][T10971] ? lock_is_held_type+0xb0/0xe0 [ 1100.780787][T10971] ? __fget_files+0x294/0x400 [ 1100.785447][T10971] security_file_ioctl+0x50/0xb0 [ 1100.790384][T10971] ksys_ioctl+0x50/0x180 [ 1100.794637][T10971] __x64_sys_ioctl+0x6f/0xb0 [ 1100.799215][T10971] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1100.804313][T10971] do_syscall_64+0x60/0xe0 [ 1100.808720][T10971] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1100.814596][T10971] RIP: 0033:0x45cba9 [ 1100.818472][T10971] Code: Bad RIP value. [ 1100.822524][T10971] RSP: 002b:00007f1c3cc99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.830921][T10971] RAX: ffffffffffffffda RBX: 00000000004e9dc0 RCX: 000000000045cba9 [ 1100.838888][T10971] RDX: 0000000020000380 RSI: 0000000000004c03 RDI: 0000000000000003 [ 1100.846834][T10971] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1100.854804][T10971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1100.862768][T10971] R13: 0000000000000403 R14: 00000000004c6d25 R15: 00007f1c3cc9a6d4 13:36:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x7a00000000000000}, 0x0) [ 1100.967510][T10980] FAT-fs (loop1): bogus number of reserved sectors [ 1100.985960][T10985] FAT-fs (loop3): bogus number of reserved sectors [ 1100.994080][T10980] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1101.000739][T10985] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x0, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[], 0x0) [ 1101.052577][T10985] FAT-fs (loop3): bogus number of reserved sectors [ 1101.061526][T10985] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:39 executing program 4 (fault-call:3 fault-nth:2): r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:36:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x8100000000000000}, 0x0) 13:36:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xc0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x0, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[], 0x0) 13:36:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[], 0x0) [ 1101.349093][T11006] FAT-fs (loop3): bogus number of reserved sectors [ 1101.379704][T11012] FAULT_INJECTION: forcing a failure. [ 1101.379704][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.386351][T11006] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) [ 1101.395937][T11012] CPU: 1 PID: 11012 Comm: syz-executor.4 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1101.408890][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.418940][T11012] Call Trace: [ 1101.422237][T11012] dump_stack+0x18f/0x20d [ 1101.426576][T11012] should_fail.cold+0x5/0x14 [ 1101.431177][T11012] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1101.436554][T11012] should_failslab+0x5/0xf [ 1101.440976][T11012] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1101.447048][T11012] __kmalloc+0x6f/0x320 [ 1101.451211][T11012] ? __d_path+0x160/0x160 [ 1101.455569][T11012] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1101.461123][T11012] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1101.466326][T11012] tomoyo_encode+0x28/0x50 [ 1101.470744][T11012] tomoyo_realpath_from_path+0x186/0x620 [ 1101.476384][T11012] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1101.481848][T11012] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1101.487484][T11012] ? tomoyo_execute_permission+0x470/0x470 [ 1101.493293][T11012] ? lock_acquire+0x1f1/0xad0 [ 1101.497961][T11012] ? delayed_put_pid+0x30/0x30 [ 1101.501705][T11013] FAT-fs (loop1): bogus number of reserved sectors [ 1101.502719][T11012] ? find_held_lock+0x2d/0x110 [ 1101.502758][T11012] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1101.502774][T11012] ? lock_is_held_type+0xb0/0xe0 [ 1101.502797][T11012] ? __fget_files+0x294/0x400 [ 1101.502820][T11012] security_file_ioctl+0x50/0xb0 [ 1101.502839][T11012] ksys_ioctl+0x50/0x180 [ 1101.502856][T11012] __x64_sys_ioctl+0x6f/0xb0 [ 1101.502877][T11012] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1101.513109][T11013] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1101.514127][T11012] do_syscall_64+0x60/0xe0 [ 1101.558988][T11012] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1101.564856][T11012] RIP: 0033:0x45cba9 [ 1101.568727][T11012] Code: Bad RIP value. [ 1101.572789][T11012] RSP: 002b:00007f1c3cc99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.581186][T11012] RAX: ffffffffffffffda RBX: 00000000004e9dc0 RCX: 000000000045cba9 [ 1101.589135][T11012] RDX: 0000000020000380 RSI: 0000000000004c03 RDI: 0000000000000003 13:36:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x0, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) [ 1101.597091][T11012] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1101.605052][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1101.613009][T11012] R13: 0000000000000403 R14: 00000000004c6d25 R15: 00007f1c3cc9a6d4 [ 1101.630679][T11012] ERROR: Out of memory at tomoyo_realpath_from_path. 13:36:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 13:36:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:39 executing program 4 (fault-call:3 fault-nth:3): r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1101.799067][T11006] FAT-fs (loop3): bogus number of reserved sectors [ 1101.819399][T11006] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1101.864329][T11033] FAULT_INJECTION: forcing a failure. [ 1101.864329][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.878619][T11033] CPU: 1 PID: 11033 Comm: syz-executor.4 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1101.888517][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.898568][T11033] Call Trace: [ 1101.901879][T11033] dump_stack+0x18f/0x20d [ 1101.906217][T11033] should_fail.cold+0x5/0x14 [ 1101.910809][T11033] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1101.916175][T11033] should_failslab+0x5/0xf [ 1101.920588][T11033] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1101.926655][T11033] __kmalloc+0x6f/0x320 [ 1101.930808][T11033] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1101.936521][T11033] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1101.942065][T11033] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1101.947279][T11033] tomoyo_encode+0x28/0x50 [ 1101.951689][T11033] tomoyo_realpath_from_path+0x186/0x620 [ 1101.957317][T11033] ? tomoyo_profile+0x42/0x50 [ 1101.961996][T11033] tomoyo_path_perm+0x212/0x3f0 [ 1101.966839][T11033] ? tomoyo_path_perm+0x1b8/0x3f0 [ 1101.971862][T11033] ? tomoyo_check_open_permission+0x380/0x380 [ 1101.977944][T11033] ? find_held_lock+0x2d/0x110 [ 1101.982727][T11033] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1101.988265][T11033] ? rwlock_bug.part.0+0x90/0x90 [ 1101.993200][T11033] security_inode_getattr+0xcf/0x140 [ 1101.998481][T11033] vfs_getattr+0x22/0x60 [ 1102.002722][T11033] loop_get_status.part.0+0x375/0x5f0 [ 1102.008085][T11033] ? lo_complete_rq+0x2d0/0x2d0 [ 1102.012928][T11033] ? loop_get_status_old+0xac/0x3c0 [ 1102.018122][T11033] ? mutex_lock_io_nested+0xf60/0xf60 [ 1102.023502][T11033] ? __bpf_address_lookup+0x290/0x290 [ 1102.028863][T11033] ? find_held_lock+0x2d/0x110 [ 1102.033622][T11033] ? is_bpf_text_address+0xa9/0x160 [ 1102.038811][T11033] ? lock_downgrade+0x820/0x820 [ 1102.043657][T11033] ? unwind_next_frame+0xe3b/0x1f90 [ 1102.048845][T11033] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1102.054912][T11033] loop_get_status_old+0x118/0x3c0 [ 1102.060016][T11033] ? loop_get_status_compat+0x1b0/0x1b0 [ 1102.065560][T11033] ? kernel_text_address+0xbd/0xf0 [ 1102.070663][T11033] ? __kernel_text_address+0x9/0x30 [ 1102.075853][T11033] ? unwind_get_return_address+0x51/0x90 [ 1102.081478][T11033] ? profile_setup.cold+0xc1/0xc1 [ 1102.086492][T11033] ? arch_stack_walk+0x97/0xf0 [ 1102.091263][T11033] ? tomoyo_path_number_perm+0x415/0x4d0 [ 1102.096885][T11033] ? stack_trace_save+0x8c/0xc0 [ 1102.101753][T11033] ? lock_acquire+0x1f1/0xad0 [ 1102.106422][T11033] ? debug_check_no_obj_freed+0xc7/0x41c [ 1102.112044][T11033] ? find_held_lock+0x2d/0x110 [ 1102.116805][T11033] lo_ioctl+0x244/0x16b0 [ 1102.121040][T11033] ? lock_downgrade+0x820/0x820 [ 1102.125883][T11033] ? loop_configure+0x1330/0x1330 [ 1102.130908][T11033] ? lockdep_hardirqs_off+0x66/0xa0 [ 1102.136098][T11033] ? find_held_lock+0x2d/0x110 [ 1102.140852][T11033] ? tomoyo_path_number_perm+0x1fa/0x4d0 [ 1102.146493][T11033] ? lock_downgrade+0x820/0x820 [ 1102.151339][T11033] ? trace_hardirqs_on+0x5f/0x220 [ 1102.156358][T11033] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1102.161463][T11033] ? tomoyo_path_number_perm+0x244/0x4d0 [ 1102.167089][T11033] ? tomoyo_execute_permission+0x470/0x470 [ 1102.172893][T11033] ? delayed_put_pid+0x30/0x30 [ 1102.177656][T11033] ? find_held_lock+0x2d/0x110 [ 1102.182407][T11033] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1102.188295][T11033] ? blkdev_common_ioctl+0x117/0x1760 [ 1102.193665][T11033] ? blk_ioctl_discard+0x310/0x310 [ 1102.198766][T11033] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1102.204650][T11033] ? do_vfs_ioctl+0x27d/0x1090 [ 1102.209403][T11033] ? generic_block_fiemap+0x60/0x60 [ 1102.214596][T11033] ? loop_configure+0x1330/0x1330 [ 1102.219610][T11033] blkdev_ioctl+0x28c/0x700 [ 1102.224111][T11033] ? blkdev_common_ioctl+0x1760/0x1760 [ 1102.229562][T11033] ? __fget_files+0x294/0x400 [ 1102.234237][T11033] block_ioctl+0xf9/0x140 [ 1102.238557][T11033] ? blkdev_fallocate+0x3f0/0x3f0 [ 1102.243572][T11033] ksys_ioctl+0x11a/0x180 [ 1102.247903][T11033] __x64_sys_ioctl+0x6f/0xb0 [ 1102.252483][T11033] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1102.257582][T11033] do_syscall_64+0x60/0xe0 [ 1102.261991][T11033] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1102.267873][T11033] RIP: 0033:0x45cba9 [ 1102.271750][T11033] Code: Bad RIP value. [ 1102.275803][T11033] RSP: 002b:00007f1c3cc99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.284218][T11033] RAX: ffffffffffffffda RBX: 00000000004e9dc0 RCX: 000000000045cba9 [ 1102.292177][T11033] RDX: 0000000020000380 RSI: 0000000000004c03 RDI: 0000000000000003 [ 1102.300149][T11033] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1102.308109][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 13:36:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) [ 1102.316068][T11033] R13: 0000000000000403 R14: 00000000004c6d25 R15: 00007f1c3cc9a6d4 [ 1102.338946][T11035] FAT-fs (loop1): bogus number of reserved sectors [ 1102.384788][T11035] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1102.464100][T11033] ERROR: Out of memory at tomoyo_realpath_from_path. 13:36:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xe0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x14, 0x32, 0x137143893ddcaf61}, 0x14}}, 0x0) 13:36:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 13:36:40 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 13:36:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:40 executing program 4 (fault-call:3 fault-nth:4): r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1102.591122][T11047] tc_dump_action: action bad kind 13:36:40 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc4750047364f6677747594b664bf2186e73fcaa2672d5565"], 0x0) 13:36:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xe903000000000000}, 0x0) 13:36:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x14, 0x32, 0x137143893ddcaf61}, 0x14}}, 0x0) [ 1102.675593][T11050] FAT-fs (loop1): bogus number of reserved sectors [ 1102.717497][T11050] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1102.728516][T11056] FAULT_INJECTION: forcing a failure. [ 1102.728516][T11056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1102.738073][T11061] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1102.741717][T11056] CPU: 1 PID: 11056 Comm: syz-executor.4 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 13:36:40 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) [ 1102.741727][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.741732][T11056] Call Trace: [ 1102.741757][T11056] dump_stack+0x18f/0x20d [ 1102.776361][T11056] should_fail.cold+0x5/0x14 [ 1102.780961][T11056] __alloc_pages_nodemask+0x1db/0x2a20 [ 1102.786427][T11056] ? __lock_acquire+0xc1e/0x56e0 [ 1102.791369][T11056] ? mark_lock+0xbc/0x1710 [ 1102.795813][T11056] ? warn_alloc+0x120/0x120 [ 1102.800317][T11056] ? mark_lock+0xbc/0x1710 [ 1102.804740][T11056] ? __lock_acquire+0xc1e/0x56e0 [ 1102.809693][T11056] cache_grow_begin+0x71/0x430 [ 1102.814457][T11056] cache_alloc_refill+0x27b/0x340 [ 1102.819481][T11056] ? lockdep_hardirqs_off+0x66/0xa0 [ 1102.824685][T11056] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1102.830404][T11056] __kmalloc+0x2f5/0x320 [ 1102.834658][T11056] tomoyo_realpath_from_path+0xc3/0x620 [ 1102.840228][T11056] ? tomoyo_profile+0x42/0x50 [ 1102.840687][T11057] FAT-fs (loop3): bogus number of reserved sectors [ 1102.844913][T11056] tomoyo_path_perm+0x212/0x3f0 [ 1102.844929][T11056] ? tomoyo_path_perm+0x1b8/0x3f0 [ 1102.844954][T11056] ? lock_downgrade+0x820/0x820 [ 1102.844970][T11056] ? tomoyo_check_open_permission+0x380/0x380 [ 1102.844992][T11056] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1102.845008][T11056] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1102.845028][T11056] ? try_to_wake_up+0xd6/0x1360 [ 1102.845044][T11056] ? __mutex_unlock_slowpath+0x2ac/0x610 [ 1102.845073][T11056] ? do_raw_spin_unlock+0x171/0x230 [ 1102.845090][T11056] ? __mutex_unlock_slowpath+0x2b6/0x610 [ 1102.845109][T11056] ? rwlock_bug.part.0+0x90/0x90 [ 1102.881577][T11057] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1102.884079][T11056] security_inode_getattr+0xcf/0x140 [ 1102.884098][T11056] vfs_getattr+0x22/0x60 [ 1102.884118][T11056] loop_get_status.part.0+0x375/0x5f0 [ 1102.884133][T11056] ? lo_complete_rq+0x2d0/0x2d0 [ 1102.884149][T11056] ? loop_get_status_old+0xac/0x3c0 [ 1102.884168][T11056] ? mutex_lock_io_nested+0xf60/0xf60 [ 1102.884183][T11056] ? __bpf_address_lookup+0x290/0x290 [ 1102.884198][T11056] ? find_held_lock+0x2d/0x110 [ 1102.884215][T11056] ? is_bpf_text_address+0xa9/0x160 [ 1102.884234][T11056] ? lock_downgrade+0x820/0x820 13:36:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1102.884253][T11056] ? unwind_next_frame+0xe3b/0x1f90 [ 1102.884270][T11056] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1102.884290][T11056] loop_get_status_old+0x118/0x3c0 [ 1102.960332][T11066] tc_dump_action: action bad kind [ 1102.962505][T11056] ? loop_get_status_compat+0x1b0/0x1b0 [ 1102.962523][T11056] ? kernel_text_address+0xbd/0xf0 [ 1102.962538][T11056] ? __kernel_text_address+0x9/0x30 [ 1102.962556][T11056] ? unwind_get_return_address+0x51/0x90 [ 1102.962573][T11056] ? profile_setup.cold+0xc1/0xc1 13:36:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x14, 0x32, 0x137143893ddcaf61}, 0x14}}, 0x0) [ 1102.962588][T11056] ? arch_stack_walk+0x97/0xf0 [ 1102.962615][T11056] ? tomoyo_path_number_perm+0x415/0x4d0 [ 1102.962630][T11056] ? stack_trace_save+0x8c/0xc0 [ 1102.962668][T11056] ? lock_acquire+0x1f1/0xad0 [ 1102.962690][T11056] ? debug_check_no_obj_freed+0xc7/0x41c [ 1103.040875][T11056] ? find_held_lock+0x2d/0x110 [ 1103.045657][T11056] lo_ioctl+0x244/0x16b0 [ 1103.049912][T11056] ? lock_downgrade+0x820/0x820 [ 1103.054773][T11056] ? loop_configure+0x1330/0x1330 [ 1103.059814][T11056] ? lockdep_hardirqs_off+0x66/0xa0 [ 1103.065020][T11056] ? find_held_lock+0x2d/0x110 [ 1103.069787][T11056] ? tomoyo_path_number_perm+0x1fa/0x4d0 [ 1103.075511][T11056] ? lock_downgrade+0x820/0x820 [ 1103.080368][T11056] ? trace_hardirqs_on+0x5f/0x220 [ 1103.085384][T11056] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1103.090528][T11056] ? tomoyo_path_number_perm+0x244/0x4d0 [ 1103.096154][T11056] ? tomoyo_execute_permission+0x470/0x470 [ 1103.101962][T11056] ? delayed_put_pid+0x30/0x30 [ 1103.106731][T11056] ? find_held_lock+0x2d/0x110 [ 1103.111473][T11056] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1103.117358][T11056] ? blkdev_common_ioctl+0x117/0x1760 [ 1103.122731][T11056] ? blk_ioctl_discard+0x310/0x310 [ 1103.127838][T11056] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1103.133722][T11056] ? do_vfs_ioctl+0x27d/0x1090 [ 1103.138479][T11056] ? generic_block_fiemap+0x60/0x60 [ 1103.143672][T11056] ? loop_configure+0x1330/0x1330 [ 1103.148718][T11056] blkdev_ioctl+0x28c/0x700 [ 1103.153215][T11056] ? blkdev_common_ioctl+0x1760/0x1760 [ 1103.158663][T11056] ? __fget_files+0x294/0x400 [ 1103.163335][T11056] block_ioctl+0xf9/0x140 [ 1103.167677][T11056] ? blkdev_fallocate+0x3f0/0x3f0 [ 1103.172709][T11056] ksys_ioctl+0x11a/0x180 [ 1103.177044][T11056] __x64_sys_ioctl+0x6f/0xb0 [ 1103.181629][T11056] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1103.186758][T11056] do_syscall_64+0x60/0xe0 [ 1103.191167][T11056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1103.197052][T11056] RIP: 0033:0x45cba9 [ 1103.200961][T11056] Code: Bad RIP value. [ 1103.205042][T11056] RSP: 002b:00007f1c3cc99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.213453][T11056] RAX: ffffffffffffffda RBX: 00000000004e9dc0 RCX: 000000000045cba9 [ 1103.221422][T11056] RDX: 0000000020000380 RSI: 0000000000004c03 RDI: 0000000000000003 [ 1103.229384][T11056] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1103.237338][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1103.245300][T11056] R13: 0000000000000403 R14: 00000000004c6d25 R15: 00007f1c3cc9a6d4 [ 1103.406142][T11057] FAT-fs (loop3): bogus number of reserved sectors [ 1103.415133][T11057] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1fffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:41 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 13:36:41 executing program 4 (fault-call:3 fault-nth:5): r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:36:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 13:36:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1103.525532][T11076] tc_dump_action: action bad kind 13:36:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 13:36:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x18, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 13:36:41 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) [ 1103.632519][T11085] FAT-fs (loop1): bogus number of reserved sectors [ 1103.660619][T11092] tc_dump_action: action bad kind 13:36:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x18, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 13:36:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 13:36:41 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1103.678400][T11085] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1103.697484][T11093] FAT-fs (loop3): bogus number of reserved sectors [ 1103.715439][T11093] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1103.829932][T11093] FAT-fs (loop3): bogus number of reserved sectors [ 1103.843391][T11093] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1103.861145][T11108] tc_dump_action: action bad kind [ 1103.872749][T11106] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x804803}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:41 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000"], 0x0) 13:36:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x0) 13:36:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x18, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) [ 1103.915425][T11107] FAT-fs (loop1): bogus number of reserved sectors [ 1103.947479][T11107] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x2, &(0x7f0000000380)) 13:36:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000"], 0x0) 13:36:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 1103.997811][T11117] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1104.139660][T11131] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1104.182662][T11121] FAT-fs (loop3): bogus number of reserved sectors [ 1104.207598][T11121] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1104.227284][T11134] tc_dump_action: action bad kind 13:36:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13:36:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000"], 0x0) 13:36:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x10, &(0x7f0000000380)) 13:36:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 1104.411461][T11140] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044cc475"], 0x0) [ 1104.458356][T11137] FAT-fs (loop1): bogus number of reserved sectors [ 1104.465135][T11137] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1104.482260][T11148] tc_dump_action: action bad kind 13:36:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617425", 0xc}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x301, &(0x7f0000000380)) [ 1104.562805][T11153] FAT-fs (loop3): bogus number of reserved sectors [ 1104.569335][T11153] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1104.577102][T11156] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1104.616970][T11157] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1104.633861][T11161] tc_dump_action: action bad kind 13:36:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6}, 0x0) 13:36:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000"], 0x0) [ 1104.658702][T11162] FAT-fs (loop1): bogus number of reserved sectors [ 1104.665534][T11162] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1104.780641][T11173] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1104.813792][T11175] tc_dump_action: action bad kind [ 1104.828205][T11153] FAT-fs (loop3): bogus number of reserved sectors [ 1104.863032][T11153] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x125d, &(0x7f0000000380)) 13:36:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617425", 0xc}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x2000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000"], 0x0) 13:36:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x7}, 0x0) 13:36:43 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1105.131789][T11188] FAULT_INJECTION: forcing a failure. [ 1105.131789][T11188] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.158556][T11190] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000"], 0x0) 13:36:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 1105.197655][T11188] CPU: 1 PID: 11188 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1105.207561][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.217615][T11188] Call Trace: [ 1105.220924][T11188] dump_stack+0x18f/0x20d [ 1105.225257][T11188] should_fail.cold+0x5/0x14 [ 1105.229855][T11188] should_failslab+0x5/0xf [ 1105.234288][T11188] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1105.240357][T11188] kmem_cache_alloc_node+0x58/0x3e0 [ 1105.245540][T11188] __alloc_skb+0x71/0x550 [ 1105.249857][T11188] netlink_sendmsg+0x94f/0xd90 [ 1105.254606][T11188] ? netlink_unicast+0x7d0/0x7d0 [ 1105.259529][T11188] ? netlink_unicast+0x7d0/0x7d0 [ 1105.264449][T11188] sock_sendmsg+0xcf/0x120 [ 1105.268858][T11188] ____sys_sendmsg+0x6e8/0x810 [ 1105.273622][T11188] ? kernel_sendmsg+0x50/0x50 [ 1105.278277][T11188] ? do_recvmmsg+0x6d0/0x6d0 [ 1105.282851][T11188] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1105.288811][T11188] ? _parse_integer+0x132/0x180 [ 1105.293682][T11188] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1105.299642][T11188] ___sys_sendmsg+0xf3/0x170 [ 1105.304217][T11188] ? sendmsg_copy_msghdr+0x160/0x160 [ 1105.309492][T11188] ? __fget_files+0x272/0x400 [ 1105.314168][T11188] ? lock_downgrade+0x820/0x820 [ 1105.318998][T11188] ? find_held_lock+0x2d/0x110 [ 1105.323742][T11188] ? ksys_write+0x212/0x250 [ 1105.328227][T11188] ? __fget_files+0x294/0x400 [ 1105.332882][T11188] ? __fget_light+0xea/0x280 [ 1105.337459][T11188] __sys_sendmsg+0xe5/0x1b0 [ 1105.341940][T11188] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1105.346949][T11188] ? do_syscall_64+0x1c/0xe0 [ 1105.351554][T11188] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1105.357519][T11188] do_syscall_64+0x60/0xe0 [ 1105.361933][T11188] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1105.367816][T11188] RIP: 0033:0x45cba9 [ 1105.371680][T11188] Code: Bad RIP value. [ 1105.375720][T11188] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.384128][T11188] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1105.392090][T11188] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1105.400037][T11188] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1105.407993][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1105.415972][T11188] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 13:36:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x125e, &(0x7f0000000380)) [ 1105.446200][T11191] FAT-fs (loop1): bogus number of reserved sectors [ 1105.463973][T11191] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1105.478891][T11192] FAT-fs (loop3): bogus number of reserved sectors 13:36:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617425", 0xc}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa00"], 0x0) [ 1105.526129][T11192] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1105.561985][T11204] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 1105.613952][T11192] FAT-fs (loop3): bogus number of reserved sectors [ 1105.621580][T11192] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1105.654515][T11206] FAT-fs (loop1): bogus number of reserved sectors [ 1105.671745][T11206] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1105.684768][T11215] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xa}, 0x0) 13:36:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x3000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1105.712151][T11217] dccp_invalid_packet: P.Data Offset(0) too small 13:36:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000380)) 13:36:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa00"], 0x0) 13:36:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200", 0x12}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:43 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1105.858112][T11221] FAT-fs (loop3): bogus number of reserved sectors [ 1105.881407][T11221] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1105.887777][T11225] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa00"], 0x0) 13:36:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xb}, 0x0) [ 1105.917115][T11230] dccp_invalid_packet: P.Data Offset(0) too small [ 1105.983636][T11236] FAULT_INJECTION: forcing a failure. [ 1105.983636][T11236] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.997524][T11236] CPU: 0 PID: 11236 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1106.007415][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.012972][T11221] FAT-fs (loop3): bogus number of reserved sectors [ 1106.017461][T11236] Call Trace: [ 1106.017485][T11236] dump_stack+0x18f/0x20d [ 1106.017505][T11236] should_fail.cold+0x5/0x14 [ 1106.017526][T11236] should_failslab+0x5/0xf [ 1106.017545][T11236] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1106.017568][T11236] kmem_cache_alloc_node_trace+0x5d/0x400 [ 1106.041844][T11221] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1106.046648][T11236] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1106.046672][T11236] __kmalloc_node_track_caller+0x38/0x60 [ 1106.046689][T11236] __alloc_skb+0xae/0x550 [ 1106.046709][T11236] netlink_sendmsg+0x94f/0xd90 [ 1106.046730][T11236] ? netlink_unicast+0x7d0/0x7d0 [ 1106.046753][T11236] ? netlink_unicast+0x7d0/0x7d0 [ 1106.046775][T11236] sock_sendmsg+0xcf/0x120 [ 1106.071818][T11240] dccp_invalid_packet: P.Data Offset(0) too small [ 1106.074497][T11236] ____sys_sendmsg+0x6e8/0x810 [ 1106.074516][T11236] ? kernel_sendmsg+0x50/0x50 [ 1106.074530][T11236] ? do_recvmmsg+0x6d0/0x6d0 [ 1106.074550][T11236] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1106.074568][T11236] ? _parse_integer+0x132/0x180 [ 1106.074584][T11236] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1106.074606][T11236] ___sys_sendmsg+0xf3/0x170 [ 1106.135230][T11236] ? sendmsg_copy_msghdr+0x160/0x160 [ 1106.140505][T11236] ? __fget_files+0x272/0x400 [ 1106.145177][T11236] ? lock_downgrade+0x820/0x820 [ 1106.150019][T11236] ? find_held_lock+0x2d/0x110 [ 1106.154774][T11236] ? ksys_write+0x212/0x250 [ 1106.159269][T11236] ? __fget_files+0x294/0x400 [ 1106.163941][T11236] ? __fget_light+0xea/0x280 [ 1106.168528][T11236] __sys_sendmsg+0xe5/0x1b0 [ 1106.173022][T11236] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1106.178063][T11236] ? do_syscall_64+0x1c/0xe0 [ 1106.182649][T11236] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1106.188620][T11236] do_syscall_64+0x60/0xe0 [ 1106.193032][T11236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1106.198925][T11236] RIP: 0033:0x45cba9 [ 1106.202801][T11236] Code: Bad RIP value. [ 1106.206854][T11236] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.215252][T11236] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1106.223212][T11236] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 13:36:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1260, &(0x7f0000000380)) [ 1106.231171][T11236] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1106.239140][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1106.247098][T11236] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 [ 1106.264893][T11229] FAT-fs (loop1): invalid media value (0x00) [ 1106.270893][T11229] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:44 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000040290"], 0x0) [ 1106.330341][T11242] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:44 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200", 0x12}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x3488000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc}, 0x0) [ 1106.435749][T11248] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1106.451726][T11251] FAULT_INJECTION: forcing a failure. [ 1106.451726][T11251] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.471453][T11251] CPU: 1 PID: 11251 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1106.481344][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.491396][T11251] Call Trace: [ 1106.494693][T11251] dump_stack+0x18f/0x20d [ 1106.499031][T11251] should_fail.cold+0x5/0x14 [ 1106.503631][T11251] should_failslab+0x5/0xf [ 1106.508061][T11251] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 1106.514141][T11251] kmem_cache_alloc+0x46/0x3a0 [ 1106.518921][T11251] skb_clone+0x14f/0x3c0 [ 1106.523177][T11251] netlink_deliver_tap+0x990/0xb70 [ 1106.528330][T11251] netlink_unicast+0x5e5/0x7d0 13:36:44 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000040290"], 0x0) [ 1106.533109][T11251] ? netlink_attachskb+0x810/0x810 [ 1106.538228][T11251] ? _copy_from_iter_full+0x247/0x890 [ 1106.543612][T11251] ? __phys_addr+0x9a/0x110 [ 1106.548122][T11251] ? __phys_addr_symbol+0x2c/0x70 [ 1106.553159][T11251] ? __check_object_size+0x171/0x3e4 [ 1106.558453][T11251] netlink_sendmsg+0x856/0xd90 [ 1106.563235][T11251] ? netlink_unicast+0x7d0/0x7d0 [ 1106.568173][T11251] ? netlink_unicast+0x7d0/0x7d0 [ 1106.573089][T11251] sock_sendmsg+0xcf/0x120 [ 1106.577485][T11251] ____sys_sendmsg+0x6e8/0x810 [ 1106.582243][T11251] ? kernel_sendmsg+0x50/0x50 [ 1106.586913][T11251] ? do_recvmmsg+0x6d0/0x6d0 [ 1106.591488][T11251] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1106.597450][T11251] ? _parse_integer+0x132/0x180 [ 1106.602291][T11251] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1106.608264][T11251] ___sys_sendmsg+0xf3/0x170 [ 1106.612832][T11251] ? sendmsg_copy_msghdr+0x160/0x160 [ 1106.618105][T11251] ? __fget_files+0x272/0x400 [ 1106.622768][T11251] ? lock_downgrade+0x820/0x820 [ 1106.627598][T11251] ? find_held_lock+0x2d/0x110 [ 1106.632361][T11251] ? ksys_write+0x212/0x250 [ 1106.636854][T11251] ? __fget_files+0x294/0x400 [ 1106.641541][T11251] ? __fget_light+0xea/0x280 [ 1106.646143][T11251] __sys_sendmsg+0xe5/0x1b0 [ 1106.650642][T11251] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1106.655663][T11251] ? do_syscall_64+0x1c/0xe0 [ 1106.660232][T11251] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1106.666190][T11251] do_syscall_64+0x60/0xe0 [ 1106.670602][T11251] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1106.676483][T11251] RIP: 0033:0x45cba9 [ 1106.680353][T11251] Code: Bad RIP value. [ 1106.684415][T11251] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.692800][T11251] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1106.700747][T11251] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1106.708695][T11251] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1106.716643][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1106.724594][T11251] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 [ 1106.759431][T11251] tc_dump_action: action bad kind 13:36:44 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe}, 0x0) 13:36:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1261, &(0x7f0000000380)) [ 1106.784198][T11257] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1106.939675][T11262] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1106.968312][T11253] FAT-fs (loop1): invalid media value (0x00) [ 1106.993948][T11253] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1107.013988][T11263] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1107.026570][T11262] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1107.056041][T11271] FAULT_INJECTION: forcing a failure. [ 1107.056041][T11271] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.069030][T11271] CPU: 0 PID: 11271 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1107.078913][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.088971][T11271] Call Trace: [ 1107.092265][T11271] dump_stack+0x18f/0x20d [ 1107.096632][T11271] should_fail.cold+0x5/0x14 [ 1107.101231][T11271] should_failslab+0x5/0xf 13:36:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf}, 0x0) 13:36:45 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000040290"], 0x0) [ 1107.105653][T11271] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 1107.111732][T11271] kmem_cache_alloc+0x46/0x3a0 [ 1107.116498][T11271] ? kasan_save_stack+0x32/0x40 [ 1107.121359][T11271] skb_clone+0x14f/0x3c0 [ 1107.125618][T11271] dev_queue_xmit_nit+0x3bb/0xac0 [ 1107.130710][T11271] ? validate_xmit_xfrm+0x4fe/0x1030 [ 1107.135997][T11271] dev_hard_start_xmit+0xaa/0x950 [ 1107.141032][T11271] ? validate_xmit_skb+0x848/0xe60 [ 1107.146128][T11271] __dev_queue_xmit+0x2096/0x2d60 [ 1107.151167][T11271] ? lock_acquire+0x1f1/0xad0 [ 1107.155823][T11271] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1107.161089][T11271] ? memcpy+0x39/0x60 [ 1107.165081][T11271] ? memcpy+0x39/0x60 [ 1107.169044][T11271] ? __skb_clone+0x586/0x770 [ 1107.173618][T11271] netlink_deliver_tap+0x92e/0xb70 [ 1107.178732][T11271] netlink_unicast+0x5e5/0x7d0 [ 1107.183510][T11271] ? netlink_attachskb+0x810/0x810 [ 1107.188614][T11271] ? _copy_from_iter_full+0x247/0x890 [ 1107.193972][T11271] ? __phys_addr+0x9a/0x110 [ 1107.198452][T11271] ? __phys_addr_symbol+0x2c/0x70 [ 1107.203455][T11271] ? __check_object_size+0x171/0x3e4 [ 1107.208719][T11271] netlink_sendmsg+0x856/0xd90 [ 1107.213476][T11271] ? netlink_unicast+0x7d0/0x7d0 [ 1107.218405][T11271] ? netlink_unicast+0x7d0/0x7d0 [ 1107.223320][T11271] sock_sendmsg+0xcf/0x120 [ 1107.227728][T11271] ____sys_sendmsg+0x6e8/0x810 [ 1107.232471][T11271] ? kernel_sendmsg+0x50/0x50 [ 1107.237124][T11271] ? do_recvmmsg+0x6d0/0x6d0 [ 1107.241697][T11271] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1107.247668][T11271] ? _parse_integer+0x132/0x180 [ 1107.252513][T11271] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1107.258476][T11271] ___sys_sendmsg+0xf3/0x170 [ 1107.263055][T11271] ? sendmsg_copy_msghdr+0x160/0x160 [ 1107.268329][T11271] ? __fget_files+0x272/0x400 [ 1107.273006][T11271] ? lock_downgrade+0x820/0x820 [ 1107.277839][T11271] ? find_held_lock+0x2d/0x110 [ 1107.282584][T11271] ? ksys_write+0x212/0x250 [ 1107.287068][T11271] ? __fget_files+0x294/0x400 [ 1107.291724][T11271] ? __fget_light+0xea/0x280 [ 1107.296312][T11271] __sys_sendmsg+0xe5/0x1b0 [ 1107.300811][T11271] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1107.305932][T11271] ? do_syscall_64+0x1c/0xe0 [ 1107.310515][T11271] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1107.316489][T11271] do_syscall_64+0x60/0xe0 [ 1107.320909][T11271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.326789][T11271] RIP: 0033:0x45cba9 [ 1107.330664][T11271] Code: Bad RIP value. [ 1107.334715][T11271] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.343115][T11271] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1107.351073][T11271] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1107.359034][T11271] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1107.366992][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1107.374954][T11271] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 [ 1107.390033][T11271] tc_dump_action: action bad kind 13:36:45 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1107.473005][T11272] FAT-fs (loop3): bogus number of reserved sectors [ 1107.480001][T11272] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1107.494567][T11279] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200", 0x12}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1262, &(0x7f0000000380)) [ 1107.545271][T11280] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1107.702372][T11272] FAT-fs (loop3): bogus number of reserved sectors [ 1107.708923][T11272] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1107.736042][T11295] FAULT_INJECTION: forcing a failure. [ 1107.736042][T11295] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.748845][T11292] FAT-fs (loop1): invalid media value (0x00) [ 1107.748875][T11295] CPU: 0 PID: 11295 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1107.762085][T11292] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1107.764698][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.764705][T11295] Call Trace: [ 1107.764726][T11295] dump_stack+0x18f/0x20d [ 1107.764745][T11295] should_fail.cold+0x5/0x14 [ 1107.764766][T11295] should_failslab+0x5/0xf [ 1107.764784][T11295] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1107.764803][T11295] kmem_cache_alloc_node+0x58/0x3e0 [ 1107.764827][T11295] ? __netlink_dump_start+0x63b/0x900 [ 1107.814582][T11295] __alloc_skb+0x71/0x550 [ 1107.818927][T11295] netlink_dump+0x68a/0xf60 [ 1107.823440][T11295] ? netlink_insert+0x1670/0x1670 [ 1107.828472][T11295] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1107.834045][T11295] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1107.840380][T11295] ? lock_downgrade+0x820/0x820 [ 1107.845248][T11295] __netlink_dump_start+0x643/0x900 [ 1107.850493][T11295] rtnetlink_rcv_msg+0x70f/0xad0 [ 1107.855421][T11295] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1107.861466][T11295] ? rtnetlink_put_metrics+0x510/0x510 [ 1107.866941][T11295] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1107.872986][T11295] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1107.878252][T11295] netlink_rcv_skb+0x15a/0x430 [ 1107.882995][T11295] ? rtnetlink_put_metrics+0x510/0x510 [ 1107.888431][T11295] ? netlink_ack+0xa10/0xa10 [ 1107.893010][T11295] netlink_unicast+0x533/0x7d0 [ 1107.897764][T11295] ? netlink_attachskb+0x810/0x810 [ 1107.902867][T11295] ? _copy_from_iter_full+0x247/0x890 [ 1107.908264][T11295] ? __phys_addr+0x9a/0x110 [ 1107.912754][T11295] ? __phys_addr_symbol+0x2c/0x70 [ 1107.917758][T11295] ? __check_object_size+0x171/0x3e4 [ 1107.923047][T11295] netlink_sendmsg+0x856/0xd90 [ 1107.927806][T11295] ? netlink_unicast+0x7d0/0x7d0 [ 1107.932741][T11295] ? netlink_unicast+0x7d0/0x7d0 [ 1107.937657][T11295] sock_sendmsg+0xcf/0x120 [ 1107.942065][T11295] ____sys_sendmsg+0x6e8/0x810 [ 1107.946938][T11295] ? kernel_sendmsg+0x50/0x50 [ 1107.951608][T11295] ? do_recvmmsg+0x6d0/0x6d0 [ 1107.956222][T11295] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1107.962193][T11295] ? _parse_integer+0x132/0x180 [ 1107.967022][T11295] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1107.972996][T11295] ___sys_sendmsg+0xf3/0x170 [ 1107.977565][T11295] ? sendmsg_copy_msghdr+0x160/0x160 [ 1107.982829][T11295] ? __fget_files+0x272/0x400 [ 1107.987500][T11295] ? lock_downgrade+0x820/0x820 [ 1107.992329][T11295] ? find_held_lock+0x2d/0x110 [ 1107.997080][T11295] ? ksys_write+0x212/0x250 [ 1108.001585][T11295] ? __fget_files+0x294/0x400 [ 1108.006256][T11295] ? __fget_light+0xea/0x280 [ 1108.010843][T11295] __sys_sendmsg+0xe5/0x1b0 [ 1108.015326][T11295] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1108.020348][T11295] ? do_syscall_64+0x1c/0xe0 [ 1108.024930][T11295] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1108.030910][T11295] do_syscall_64+0x60/0xe0 [ 1108.035309][T11295] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1108.041190][T11295] RIP: 0033:0x45cba9 [ 1108.045063][T11295] Code: Bad RIP value. [ 1108.049103][T11295] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.057502][T11295] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1108.065452][T11295] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1108.073443][T11295] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1108.081426][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1108.089378][T11295] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 13:36:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x4000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:46 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044c"], 0x0) 13:36:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x0) 13:36:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1263, &(0x7f0000000380)) 13:36:46 executing program 0 (fault-call:1 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1108.319183][T11306] FAULT_INJECTION: forcing a failure. [ 1108.319183][T11306] name failslab, interval 1, probability 0, space 0, times 0 13:36:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x12}, 0x0) [ 1108.376771][T11306] CPU: 0 PID: 11306 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1108.386682][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.387409][T11313] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1108.396728][T11306] Call Trace: [ 1108.396753][T11306] dump_stack+0x18f/0x20d [ 1108.396775][T11306] should_fail.cold+0x5/0x14 [ 1108.396796][T11306] should_failslab+0x5/0xf [ 1108.396823][T11306] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1108.426550][T11306] kmem_cache_alloc_node_trace+0x5d/0x400 [ 1108.432325][T11306] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1108.437893][T11306] __kmalloc_node_track_caller+0x38/0x60 [ 1108.443505][T11306] __alloc_skb+0xae/0x550 [ 1108.447826][T11306] netlink_dump+0x68a/0xf60 [ 1108.452327][T11306] ? netlink_insert+0x1670/0x1670 [ 1108.457345][T11306] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1108.462873][T11306] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1108.469183][T11306] ? lock_downgrade+0x820/0x820 [ 1108.474138][T11306] __netlink_dump_start+0x643/0x900 [ 1108.479319][T11306] rtnetlink_rcv_msg+0x70f/0xad0 [ 1108.484444][T11306] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1108.490522][T11306] ? rtnetlink_put_metrics+0x510/0x510 [ 1108.495965][T11306] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1108.502013][T11306] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1108.507281][T11306] netlink_rcv_skb+0x15a/0x430 [ 1108.512025][T11306] ? rtnetlink_put_metrics+0x510/0x510 [ 1108.517461][T11306] ? netlink_ack+0xa10/0xa10 [ 1108.522038][T11306] netlink_unicast+0x533/0x7d0 [ 1108.526782][T11306] ? netlink_attachskb+0x810/0x810 [ 1108.531880][T11306] ? _copy_from_iter_full+0x247/0x890 [ 1108.537243][T11306] ? __phys_addr+0x9a/0x110 [ 1108.541723][T11306] ? __phys_addr_symbol+0x2c/0x70 [ 1108.546728][T11306] ? __check_object_size+0x171/0x3e4 [ 1108.551993][T11306] netlink_sendmsg+0x856/0xd90 [ 1108.556755][T11306] ? netlink_unicast+0x7d0/0x7d0 [ 1108.561675][T11306] ? netlink_unicast+0x7d0/0x7d0 [ 1108.566590][T11306] sock_sendmsg+0xcf/0x120 [ 1108.570983][T11306] ____sys_sendmsg+0x6e8/0x810 [ 1108.575724][T11306] ? kernel_sendmsg+0x50/0x50 [ 1108.580377][T11306] ? do_recvmmsg+0x6d0/0x6d0 [ 1108.585036][T11306] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1108.591006][T11306] ? _parse_integer+0x132/0x180 [ 1108.595847][T11306] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1108.601820][T11306] ___sys_sendmsg+0xf3/0x170 [ 1108.606388][T11306] ? sendmsg_copy_msghdr+0x160/0x160 [ 1108.611652][T11306] ? __fget_files+0x272/0x400 [ 1108.616308][T11306] ? lock_downgrade+0x820/0x820 [ 1108.621136][T11306] ? find_held_lock+0x2d/0x110 [ 1108.625878][T11306] ? ksys_write+0x212/0x250 [ 1108.630361][T11306] ? __fget_files+0x294/0x400 [ 1108.635033][T11306] ? __fget_light+0xea/0x280 [ 1108.639614][T11306] __sys_sendmsg+0xe5/0x1b0 [ 1108.644106][T11306] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1108.649114][T11306] ? do_syscall_64+0x1c/0xe0 [ 1108.653682][T11306] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1108.659652][T11306] do_syscall_64+0x60/0xe0 [ 1108.664049][T11306] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1108.669917][T11306] RIP: 0033:0x45cba9 [ 1108.673796][T11306] Code: Bad RIP value. [ 1108.677848][T11306] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.686243][T11306] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1108.694209][T11306] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1108.702174][T11306] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1108.710143][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1108.718095][T11306] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 13:36:46 executing program 0 (fault-call:1 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x13}, 0x0) 13:36:46 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078044c"], 0x0) 13:36:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1264, &(0x7f0000000380)) [ 1108.833009][T11315] FAT-fs (loop3): bogus number of reserved sectors [ 1108.839676][T11314] FAT-fs (loop1): invalid media value (0x00) [ 1108.856453][T11314] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1108.863724][T11315] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1108.919200][T11327] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1108.958285][T11330] FAULT_INJECTION: forcing a failure. [ 1108.958285][T11330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1108.971580][T11330] CPU: 1 PID: 11330 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1108.981458][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.991526][T11330] Call Trace: [ 1108.994821][T11330] dump_stack+0x18f/0x20d [ 1108.999159][T11330] should_fail.cold+0x5/0x14 [ 1109.003752][T11330] ? mark_lock+0xbc/0x1710 [ 1109.008179][T11330] __alloc_pages_nodemask+0x1db/0x2a20 [ 1109.013650][T11330] ? __lock_acquire+0x16e3/0x56e0 13:36:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1109.018686][T11330] ? kasan_save_stack+0x32/0x40 [ 1109.023541][T11330] ? kasan_save_stack+0x1b/0x40 [ 1109.028392][T11330] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1109.034212][T11330] ? warn_alloc+0x120/0x120 [ 1109.038711][T11330] ? netlink_sendmsg+0x856/0xd90 [ 1109.043636][T11330] ? sock_sendmsg+0xcf/0x120 [ 1109.048212][T11330] ? ____sys_sendmsg+0x6e8/0x810 [ 1109.053160][T11330] ? ___sys_sendmsg+0xf3/0x170 [ 1109.057917][T11330] ? __sys_sendmsg+0xe5/0x1b0 [ 1109.062587][T11330] ? lock_acquire+0x1f1/0xad0 [ 1109.067255][T11330] ? fs_reclaim_acquire+0xa1/0x110 [ 1109.072359][T11330] ? find_held_lock+0x2d/0x110 [ 1109.077151][T11330] ? fs_reclaim_release+0x94/0xf0 [ 1109.082198][T11330] cache_grow_begin+0x71/0x430 [ 1109.086963][T11330] cache_alloc_refill+0x27b/0x340 [ 1109.091993][T11330] ? lockdep_hardirqs_off+0x66/0xa0 [ 1109.097300][T11330] kmem_cache_alloc_node_trace+0x3dc/0x400 [ 1109.103100][T11330] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1109.108651][T11330] __kmalloc_node_track_caller+0x38/0x60 [ 1109.114278][T11330] __alloc_skb+0xae/0x550 [ 1109.118612][T11330] netlink_dump+0x68a/0xf60 [ 1109.123148][T11330] ? netlink_insert+0x1670/0x1670 [ 1109.128171][T11330] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1109.133711][T11330] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1109.140043][T11330] ? lock_downgrade+0x820/0x820 [ 1109.144888][T11330] __netlink_dump_start+0x643/0x900 [ 1109.150077][T11330] rtnetlink_rcv_msg+0x70f/0xad0 [ 1109.155001][T11330] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1109.161058][T11330] ? rtnetlink_put_metrics+0x510/0x510 [ 1109.166508][T11330] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1109.172576][T11330] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1109.177854][T11330] netlink_rcv_skb+0x15a/0x430 [ 1109.182606][T11330] ? rtnetlink_put_metrics+0x510/0x510 [ 1109.188063][T11330] ? netlink_ack+0xa10/0xa10 [ 1109.192665][T11330] netlink_unicast+0x533/0x7d0 [ 1109.197433][T11330] ? netlink_attachskb+0x810/0x810 [ 1109.202541][T11330] ? _copy_from_iter_full+0x247/0x890 [ 1109.207910][T11330] ? __phys_addr+0x9a/0x110 [ 1109.212403][T11330] ? __phys_addr_symbol+0x2c/0x70 [ 1109.217406][T11330] ? __check_object_size+0x171/0x3e4 [ 1109.222682][T11330] netlink_sendmsg+0x856/0xd90 [ 1109.227447][T11330] ? netlink_unicast+0x7d0/0x7d0 [ 1109.232383][T11330] ? netlink_unicast+0x7d0/0x7d0 [ 1109.237296][T11330] sock_sendmsg+0xcf/0x120 [ 1109.241688][T11330] ____sys_sendmsg+0x6e8/0x810 [ 1109.246439][T11330] ? kernel_sendmsg+0x50/0x50 [ 1109.251099][T11330] ? do_recvmmsg+0x6d0/0x6d0 [ 1109.255673][T11330] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1109.261630][T11330] ? _parse_integer+0x132/0x180 [ 1109.266469][T11330] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1109.272449][T11330] ___sys_sendmsg+0xf3/0x170 [ 1109.277029][T11330] ? sendmsg_copy_msghdr+0x160/0x160 [ 1109.282315][T11330] ? __fget_files+0x272/0x400 [ 1109.286997][T11330] ? lock_downgrade+0x820/0x820 [ 1109.291835][T11330] ? find_held_lock+0x2d/0x110 [ 1109.296590][T11330] ? ksys_write+0x212/0x250 [ 1109.301069][T11330] ? __fget_files+0x294/0x400 [ 1109.305738][T11330] ? __fget_light+0xea/0x280 [ 1109.310328][T11330] __sys_sendmsg+0xe5/0x1b0 [ 1109.314807][T11330] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1109.319813][T11330] ? do_syscall_64+0x1c/0xe0 [ 1109.324406][T11330] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1109.330373][T11330] do_syscall_64+0x60/0xe0 [ 1109.334781][T11330] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1109.340646][T11330] RIP: 0033:0x45cba9 [ 1109.344517][T11330] Code: Bad RIP value. [ 1109.348567][T11330] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.356980][T11330] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1109.364941][T11330] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1109.372914][T11330] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1109.380873][T11330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1109.388828][T11330] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 [ 1109.401101][T11330] tc_dump_action: action bad kind 13:36:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x5000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48}, 0x0) 13:36:47 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078"], 0x0) 13:36:47 executing program 0 (fault-call:1 fault-nth:7): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:47 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078"], 0x0) 13:36:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c}, 0x0) [ 1109.527046][T11341] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 13:36:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1265, &(0x7f0000000380)) [ 1109.584357][T11337] FAT-fs (loop1): invalid media value (0x00) [ 1109.590517][T11337] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1109.648905][T11351] tc_dump_action: action bad kind [ 1109.654312][T11351] FAULT_INJECTION: forcing a failure. [ 1109.654312][T11351] name failslab, interval 1, probability 0, space 0, times 0 13:36:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1109.719031][T11351] CPU: 1 PID: 11351 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1109.728930][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.738983][T11351] Call Trace: [ 1109.742278][T11351] dump_stack+0x18f/0x20d [ 1109.746637][T11351] should_fail.cold+0x5/0x14 [ 1109.751264][T11351] should_failslab+0x5/0xf [ 1109.755692][T11351] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 1109.761767][T11351] kmem_cache_alloc+0x46/0x3a0 [ 1109.766567][T11351] skb_clone+0x14f/0x3c0 [ 1109.770916][T11351] netlink_deliver_tap+0x990/0xb70 [ 1109.776052][T11351] netlink_dump+0xc1b/0xf60 [ 1109.780568][T11351] ? netlink_insert+0x1670/0x1670 [ 1109.785599][T11351] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1109.791159][T11351] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1109.797507][T11351] ? lock_downgrade+0x820/0x820 [ 1109.802373][T11351] __netlink_dump_start+0x643/0x900 [ 1109.806772][T11358] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1109.807583][T11351] rtnetlink_rcv_msg+0x70f/0xad0 [ 1109.807601][T11351] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1109.807621][T11351] ? rtnetlink_put_metrics+0x510/0x510 [ 1109.807638][T11351] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1109.807659][T11351] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1109.807684][T11351] netlink_rcv_skb+0x15a/0x430 [ 1109.848978][T11351] ? rtnetlink_put_metrics+0x510/0x510 [ 1109.854441][T11351] ? netlink_ack+0xa10/0xa10 [ 1109.859052][T11351] netlink_unicast+0x533/0x7d0 [ 1109.863827][T11351] ? netlink_attachskb+0x810/0x810 [ 1109.868941][T11351] ? _copy_from_iter_full+0x247/0x890 [ 1109.874354][T11351] ? __phys_addr+0x9a/0x110 [ 1109.878872][T11351] ? __phys_addr_symbol+0x2c/0x70 [ 1109.883906][T11351] ? __check_object_size+0x171/0x3e4 [ 1109.889229][T11351] netlink_sendmsg+0x856/0xd90 [ 1109.894000][T11351] ? netlink_unicast+0x7d0/0x7d0 [ 1109.898951][T11351] ? netlink_unicast+0x7d0/0x7d0 [ 1109.903896][T11351] sock_sendmsg+0xcf/0x120 [ 1109.908321][T11351] ____sys_sendmsg+0x6e8/0x810 [ 1109.913090][T11351] ? kernel_sendmsg+0x50/0x50 [ 1109.917788][T11351] ? do_recvmmsg+0x6d0/0x6d0 [ 1109.922390][T11351] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1109.928371][T11351] ? _parse_integer+0x132/0x180 [ 1109.933226][T11351] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1109.939208][T11351] ___sys_sendmsg+0xf3/0x170 [ 1109.943804][T11351] ? sendmsg_copy_msghdr+0x160/0x160 [ 1109.949093][T11351] ? __fget_files+0x272/0x400 [ 1109.953777][T11351] ? lock_downgrade+0x820/0x820 [ 1109.958637][T11351] ? find_held_lock+0x2d/0x110 [ 1109.963406][T11351] ? ksys_write+0x212/0x250 13:36:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1267, &(0x7f0000000380)) [ 1109.967917][T11351] ? __fget_files+0x294/0x400 [ 1109.972605][T11351] ? __fget_light+0xea/0x280 [ 1109.977205][T11351] __sys_sendmsg+0xe5/0x1b0 [ 1109.981714][T11351] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1109.986753][T11351] ? do_syscall_64+0x1c/0xe0 [ 1109.991355][T11351] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1109.997341][T11351] do_syscall_64+0x60/0xe0 [ 1110.001766][T11351] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1110.007659][T11351] RIP: 0033:0x45cba9 [ 1110.011544][T11351] Code: Bad RIP value. [ 1110.012578][T11350] FAT-fs (loop3): bogus number of reserved sectors [ 1110.015601][T11351] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.015616][T11351] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1110.015625][T11351] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1110.015634][T11351] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1110.015643][T11351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1110.015653][T11351] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 [ 1110.070047][T11352] __nla_validate_parse: 5 callbacks suppressed [ 1110.070057][T11352] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1110.072940][T11350] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:48 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078"], 0x0) 13:36:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 1110.134961][T11363] FAT-fs (loop1): invalid media value (0x00) [ 1110.145609][T11363] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:48 executing program 0 (fault-call:1 fault-nth:8): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1110.271318][T11372] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1110.402292][T11350] FAT-fs (loop3): bogus number of reserved sectors [ 1110.408830][T11350] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1110.461294][T11379] tc_dump_action: action bad kind [ 1110.505790][T11379] FAULT_INJECTION: forcing a failure. [ 1110.505790][T11379] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.518753][T11379] CPU: 1 PID: 11379 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1110.528646][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.538696][T11379] Call Trace: [ 1110.541994][T11379] dump_stack+0x18f/0x20d [ 1110.546343][T11379] should_fail.cold+0x5/0x14 [ 1110.550938][T11379] should_failslab+0x5/0xf [ 1110.555342][T11379] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 1110.561417][T11379] kmem_cache_alloc+0x46/0x3a0 [ 1110.566185][T11379] ? kasan_save_stack+0x32/0x40 [ 1110.571045][T11379] skb_clone+0x14f/0x3c0 [ 1110.575285][T11379] dev_queue_xmit_nit+0x3bb/0xac0 [ 1110.580291][T11379] ? validate_xmit_xfrm+0x4fe/0x1030 [ 1110.585576][T11379] dev_hard_start_xmit+0xaa/0x950 [ 1110.590629][T11379] ? validate_xmit_skb+0x848/0xe60 [ 1110.595724][T11379] __dev_queue_xmit+0x2096/0x2d60 [ 1110.600736][T11379] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1110.606015][T11379] ? memcpy+0x39/0x60 [ 1110.609981][T11379] ? memcpy+0x39/0x60 [ 1110.613946][T11379] ? __skb_clone+0x586/0x770 [ 1110.618562][T11379] netlink_deliver_tap+0x92e/0xb70 [ 1110.623676][T11379] netlink_dump+0xc1b/0xf60 [ 1110.628194][T11379] ? netlink_insert+0x1670/0x1670 [ 1110.633199][T11379] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1110.638725][T11379] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1110.645042][T11379] ? lock_downgrade+0x820/0x820 [ 1110.649886][T11379] __netlink_dump_start+0x643/0x900 [ 1110.655077][T11379] rtnetlink_rcv_msg+0x70f/0xad0 [ 1110.660029][T11379] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1110.666078][T11379] ? rtnetlink_put_metrics+0x510/0x510 [ 1110.671515][T11379] ? tcf_action_shared_attrs_size+0x260/0x260 [ 1110.677591][T11379] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1110.682875][T11379] netlink_rcv_skb+0x15a/0x430 [ 1110.687650][T11379] ? rtnetlink_put_metrics+0x510/0x510 [ 1110.693104][T11379] ? netlink_ack+0xa10/0xa10 [ 1110.697708][T11379] netlink_unicast+0x533/0x7d0 [ 1110.702484][T11379] ? netlink_attachskb+0x810/0x810 [ 1110.707586][T11379] ? _copy_from_iter_full+0x247/0x890 [ 1110.712946][T11379] ? __phys_addr+0x9a/0x110 [ 1110.717447][T11379] ? __phys_addr_symbol+0x2c/0x70 [ 1110.722464][T11379] ? __check_object_size+0x171/0x3e4 [ 1110.727751][T11379] netlink_sendmsg+0x856/0xd90 [ 1110.732523][T11379] ? netlink_unicast+0x7d0/0x7d0 [ 1110.737457][T11379] ? netlink_unicast+0x7d0/0x7d0 [ 1110.742386][T11379] sock_sendmsg+0xcf/0x120 [ 1110.746803][T11379] ____sys_sendmsg+0x6e8/0x810 [ 1110.751575][T11379] ? kernel_sendmsg+0x50/0x50 [ 1110.756229][T11379] ? do_recvmmsg+0x6d0/0x6d0 [ 1110.760815][T11379] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1110.766779][T11379] ? _parse_integer+0x132/0x180 [ 1110.771613][T11379] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1110.777664][T11379] ___sys_sendmsg+0xf3/0x170 [ 1110.782243][T11379] ? sendmsg_copy_msghdr+0x160/0x160 [ 1110.787521][T11379] ? __fget_files+0x272/0x400 [ 1110.792217][T11379] ? lock_downgrade+0x820/0x820 [ 1110.797065][T11379] ? find_held_lock+0x2d/0x110 [ 1110.801868][T11379] ? ksys_write+0x212/0x250 [ 1110.806354][T11379] ? __fget_files+0x294/0x400 [ 1110.811020][T11379] ? __fget_light+0xea/0x280 [ 1110.815630][T11379] __sys_sendmsg+0xe5/0x1b0 [ 1110.820113][T11379] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1110.825140][T11379] ? do_syscall_64+0x1c/0xe0 [ 1110.829727][T11379] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1110.835711][T11379] do_syscall_64+0x60/0xe0 [ 1110.840109][T11379] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1110.846009][T11379] RIP: 0033:0x45cba9 [ 1110.849887][T11379] Code: Bad RIP value. [ 1110.853930][T11379] RSP: 002b:00007f53dd231c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.862324][T11379] RAX: ffffffffffffffda RBX: 0000000000503840 RCX: 000000000045cba9 [ 1110.870299][T11379] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1110.878252][T11379] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1110.886202][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1110.895408][T11379] R13: 0000000000000a6d R14: 00000000004cd49c R15: 00007f53dd2326d4 13:36:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x6000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:48 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x68}, 0x0) 13:36:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1268, &(0x7f0000000380)) 13:36:48 executing program 0 (fault-call:1 fault-nth:9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1110.986627][T11385] net_ratelimit: 1 callbacks suppressed [ 1110.986639][T11385] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:36:49 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078"], 0x0) [ 1111.033322][T11389] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1111.053868][T11390] tc_dump_action: action bad kind 13:36:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6c}, 0x0) [ 1111.084639][T11391] FAT-fs (loop1): bogus logical sector size 549 [ 1111.107805][T11391] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:49 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078"], 0x0) [ 1111.151612][T11399] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 13:36:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1111.244564][T11397] FAT-fs (loop3): bogus number of reserved sectors [ 1111.313352][T11397] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1111.358544][T11407] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1269, &(0x7f0000000380)) [ 1111.462621][T11408] tc_dump_action: action bad kind 13:36:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x7000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1111.488059][T11410] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 13:36:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x74}, 0x0) 13:36:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1111.590478][T11413] FAT-fs (loop1): invalid media value (0x00) [ 1111.640255][T11418] tc_dump_action: action bad kind 13:36:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:49 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000004029078"], 0x0) [ 1111.662542][T11413] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x7a}, 0x0) 13:36:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1111.709106][T11424] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1111.744601][T11427] tc_dump_action: action bad kind 13:36:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1111.817921][T11431] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1111.842971][T11423] FAT-fs (loop3): bogus number of reserved sectors 13:36:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 1111.870223][T11423] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1111.878563][T11437] tc_dump_action: action bad kind [ 1111.891193][T11432] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 13:36:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1274, &(0x7f0000000380)) 13:36:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:49 executing program 5 (fault-call:4 fault-nth:0): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1111.919227][T11439] FAT-fs (loop1): invalid media value (0x00) [ 1111.937817][T11439] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1111.994948][T11444] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1112.064127][T11423] FAT-fs (loop3): bogus number of reserved sectors [ 1112.072335][T11423] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1112.129634][T11452] FAULT_INJECTION: forcing a failure. [ 1112.129634][T11452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1112.179252][T11454] tc_dump_action: action bad kind [ 1112.190270][T11452] CPU: 0 PID: 11452 Comm: syz-executor.5 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1112.200163][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.210216][T11452] Call Trace: [ 1112.213511][T11452] dump_stack+0x18f/0x20d [ 1112.217852][T11452] should_fail.cold+0x5/0x14 [ 1112.222455][T11452] __alloc_pages_nodemask+0x1db/0x2a20 [ 1112.227935][T11452] ? __lock_acquire+0xc1e/0x56e0 [ 1112.232885][T11452] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1112.238881][T11452] ? warn_alloc+0x120/0x120 [ 1112.243414][T11452] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1112.249397][T11452] ? lock_acquire+0x1f1/0xad0 [ 1112.254072][T11452] ? tun_net_xmit+0x16b0/0x16b0 [ 1112.258920][T11452] ? find_held_lock+0x2d/0x110 [ 1112.263674][T11452] ? tun_build_skb+0x1d2/0xf30 [ 1112.268435][T11452] alloc_pages_current+0x187/0x280 [ 1112.273545][T11452] skb_page_frag_refill+0x281/0x590 [ 1112.278737][T11452] tun_build_skb+0x24b/0xf30 [ 1112.283326][T11452] ? tun_net_xmit+0x16b0/0x16b0 [ 1112.288171][T11452] ? __lock_acquire+0xc1e/0x56e0 [ 1112.293107][T11452] tun_get_user+0x7fa/0x35b0 [ 1112.297699][T11452] ? lock_acquire+0x1f1/0xad0 [ 1112.302369][T11452] ? tun_build_skb+0xf30/0xf30 [ 1112.307124][T11452] ? tun_get+0x160/0x280 [ 1112.311362][T11452] ? lock_downgrade+0x820/0x820 [ 1112.316204][T11452] ? aa_file_perm+0x5e2/0x1100 [ 1112.320969][T11452] tun_chr_write_iter+0xba/0x151 [ 1112.325905][T11452] new_sync_write+0x422/0x650 [ 1112.330572][T11452] ? new_sync_read+0x6e0/0x6e0 [ 1112.335327][T11452] ? lock_downgrade+0x820/0x820 [ 1112.340166][T11452] ? vfs_write+0x397/0x6b0 [ 1112.344577][T11452] ? apparmor_file_permission+0x26e/0x4e0 [ 1112.350293][T11452] vfs_write+0x59d/0x6b0 [ 1112.354531][T11452] ksys_write+0x12d/0x250 [ 1112.358850][T11452] ? __ia32_sys_read+0xb0/0xb0 [ 1112.363605][T11452] ? lock_is_held_type+0xb0/0xe0 [ 1112.368532][T11452] ? do_syscall_64+0x1c/0xe0 [ 1112.373112][T11452] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1112.379084][T11452] do_syscall_64+0x60/0xe0 [ 1112.383494][T11452] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1112.389374][T11452] RIP: 0033:0x416661 [ 1112.393247][T11452] Code: Bad RIP value. [ 1112.397314][T11452] RSP: 002b:00007f0dc91f7c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1112.405713][T11452] RAX: ffffffffffffffda RBX: 000000000050a700 RCX: 0000000000416661 [ 1112.413673][T11452] RDX: 0000000000000046 RSI: 0000000020000140 RDI: 00000000000000f0 [ 1112.421630][T11452] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 13:36:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x8000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x300}, 0x0) 13:36:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1276, &(0x7f0000000380)) 13:36:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1112.429589][T11452] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000006 [ 1112.437547][T11452] R13: 0000000000000c28 R14: 00000000004ce743 R15: 00007f0dc91f86d4 13:36:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1112.531848][T11458] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x3e9}, 0x0) 13:36:50 executing program 5 (fault-call:4 fault-nth:1): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1112.582375][T11460] FAT-fs (loop1): invalid media value (0x00) [ 1112.591421][T11452] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1112.609398][T11460] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1112.625183][T11467] tc_dump_action: action bad kind 13:36:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000380)) 13:36:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:36:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1112.781056][T11470] FAULT_INJECTION: forcing a failure. [ 1112.781056][T11470] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.803861][T11472] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1112.861772][T11470] CPU: 0 PID: 11470 Comm: syz-executor.5 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1112.871690][T11470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.881743][T11470] Call Trace: [ 1112.885040][T11470] dump_stack+0x18f/0x20d [ 1112.889367][T11470] should_fail.cold+0x5/0x14 [ 1112.893965][T11470] should_failslab+0x5/0xf [ 1112.898397][T11470] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 1112.904481][T11470] kmem_cache_alloc+0x46/0x3a0 [ 1112.909253][T11470] __build_skb+0x21/0x60 [ 1112.913491][T11470] build_skb+0x1c/0x190 [ 1112.917643][T11470] __tun_build_skb+0x2c/0x260 [ 1112.922314][T11470] tun_build_skb+0x617/0xf30 [ 1112.926924][T11470] ? tun_net_xmit+0x16b0/0x16b0 [ 1112.931773][T11470] ? __lock_acquire+0xc1e/0x56e0 [ 1112.936712][T11470] tun_get_user+0x7fa/0x35b0 [ 1112.941305][T11470] ? lock_acquire+0x1f1/0xad0 [ 1112.945988][T11470] ? tun_build_skb+0xf30/0xf30 [ 1112.950750][T11470] ? tun_get+0x160/0x280 [ 1112.954990][T11470] ? lock_downgrade+0x820/0x820 [ 1112.959837][T11470] ? aa_file_perm+0x5e2/0x1100 [ 1112.964611][T11470] tun_chr_write_iter+0xba/0x151 [ 1112.969544][T11470] new_sync_write+0x422/0x650 [ 1112.974214][T11470] ? new_sync_read+0x6e0/0x6e0 [ 1112.978971][T11470] ? lock_downgrade+0x820/0x820 [ 1112.983813][T11470] ? vfs_write+0x397/0x6b0 [ 1112.988227][T11470] ? apparmor_file_permission+0x26e/0x4e0 [ 1112.993949][T11470] vfs_write+0x59d/0x6b0 [ 1112.998194][T11470] ksys_write+0x12d/0x250 [ 1113.002519][T11470] ? __ia32_sys_read+0xb0/0xb0 [ 1113.007284][T11470] ? lock_is_held_type+0xb0/0xe0 [ 1113.012209][T11470] ? do_syscall_64+0x1c/0xe0 [ 1113.016909][T11470] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1113.022880][T11470] do_syscall_64+0x60/0xe0 [ 1113.027287][T11470] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1113.033167][T11470] RIP: 0033:0x416661 [ 1113.037042][T11470] Code: Bad RIP value. [ 1113.041093][T11470] RSP: 002b:00007f0dc91f7c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1113.049502][T11470] RAX: ffffffffffffffda RBX: 000000000050a700 RCX: 0000000000416661 [ 1113.057472][T11470] RDX: 0000000000000046 RSI: 0000000020000140 RDI: 00000000000000f0 [ 1113.065432][T11470] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1113.073389][T11470] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000006 [ 1113.081360][T11470] R13: 0000000000000c28 R14: 00000000004ce743 R15: 00007f0dc91f86d4 13:36:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 1113.276264][T11485] tc_dump_action: action bad kind [ 1113.290447][T11486] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1113.482303][T11482] FAT-fs (loop1): bogus logical sector size 549 [ 1113.488581][T11482] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1113.616900][T11492] FAT-fs (loop3): bogus number of reserved sectors [ 1113.647664][T11492] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x9000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000380)) 13:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x600}, 0x0) 13:36:51 executing program 5 (fault-call:4 fault-nth:2): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:51 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1113.761376][T11502] tc_dump_action: action bad kind [ 1113.789117][T11505] FAULT_INJECTION: forcing a failure. [ 1113.789117][T11505] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.803679][T11504] FAULT_INJECTION: forcing a failure. [ 1113.803679][T11504] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.816353][T11504] CPU: 0 PID: 11504 Comm: syz-executor.5 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1113.826235][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.836283][T11504] Call Trace: 13:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x612}, 0x0) [ 1113.839577][T11504] dump_stack+0x18f/0x20d [ 1113.843916][T11504] should_fail.cold+0x5/0x14 [ 1113.848520][T11504] ? __nf_conntrack_find_get+0xcb/0xf30 [ 1113.854100][T11504] should_failslab+0x5/0xf [ 1113.858527][T11504] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 1113.864600][T11504] kmem_cache_alloc+0x46/0x3a0 [ 1113.869385][T11504] __nf_conntrack_alloc+0xda/0x5f0 [ 1113.874515][T11504] init_conntrack.constprop.0+0xdd3/0x1060 [ 1113.880348][T11504] ? __nf_conntrack_find_get+0x827/0xf30 13:36:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1113.885998][T11504] ? nf_conntrack_alloc+0x40/0x40 [ 1113.891014][T11504] ? hash_conntrack_raw+0x2dc/0x470 [ 1113.896303][T11504] ? ip6t_do_table+0xbb5/0x1920 [ 1113.901170][T11504] nf_conntrack_in+0x9b9/0x12a0 [ 1113.906044][T11504] ? nf_conntrack_find_get+0x40/0x40 [ 1113.911335][T11504] ? lock_acquire+0x1f1/0xad0 [ 1113.916019][T11504] ? ip6t_do_table+0x21/0x1920 [ 1113.920797][T11504] ? ipv6_defrag+0x79/0x4c0 [ 1113.925307][T11504] nf_hook_slow+0xc5/0x1e0 [ 1113.929776][T11504] nf_hook.constprop.0+0x35b/0x5d0 [ 1113.934898][T11504] ? ip6_rcv_finish_core.constprop.0.isra.0+0x570/0x570 [ 1113.941830][T11504] ? NF_HOOK_LIST.constprop.0+0x330/0x330 [ 1113.947551][T11504] ? tun_sock_write_space+0xf2/0x1d0 [ 1113.952840][T11504] ? ip6_rcv_finish_core.constprop.0.isra.0+0x570/0x570 [ 1113.959768][T11504] ? ip6_rcv_core+0xf6c/0x1bb0 [ 1113.964539][T11504] ipv6_rcv+0x9e/0x3c0 [ 1113.968606][T11504] ? ip6_rcv_core+0x1bb0/0x1bb0 [ 1113.973455][T11504] __netif_receive_skb_one_core+0x114/0x180 [ 1113.979345][T11504] ? __netif_receive_skb_core+0x3690/0x3690 [ 1113.985237][T11504] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1113.990350][T11504] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 1113.996677][T11504] ? ktime_get_with_offset+0x130/0x1a0 [ 1114.002134][T11504] __netif_receive_skb+0x27/0x1c0 [ 1114.007179][T11504] netif_receive_skb+0x159/0x990 [ 1114.012113][T11504] ? __netif_receive_skb+0x1c0/0x1c0 [ 1114.017484][T11504] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1114.023461][T11504] ? skb_set_owner_w+0x24e/0x400 [ 1114.028401][T11504] ? __tun_build_skb+0x1cd/0x260 [ 1114.033343][T11504] tun_rx_batched.isra.0+0x460/0x720 [ 1114.038623][T11504] ? tun_get_user+0x197f/0x35b0 [ 1114.043472][T11504] ? tun_sock_write_space+0x1d0/0x1d0 [ 1114.048841][T11504] ? lock_release+0x8d0/0x8d0 [ 1114.053516][T11504] ? lock_downgrade+0x820/0x820 [ 1114.058430][T11504] ? eth_type_trans+0x360/0x690 [ 1114.063301][T11504] ? __local_bh_enable_ip+0x159/0x250 [ 1114.068669][T11504] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1114.074643][T11504] ? tun_get_user+0x231f/0x35b0 [ 1114.079486][T11504] ? trace_hardirqs_on+0x5f/0x220 [ 1114.084528][T11504] tun_get_user+0x23b2/0x35b0 [ 1114.089218][T11504] ? lock_acquire+0x1f1/0xad0 [ 1114.093901][T11504] ? tun_build_skb+0xf30/0xf30 [ 1114.098669][T11504] ? tun_get+0x160/0x280 [ 1114.102925][T11504] ? aa_file_perm+0x5e2/0x1100 [ 1114.107697][T11504] tun_chr_write_iter+0xba/0x151 [ 1114.112635][T11504] new_sync_write+0x422/0x650 [ 1114.117313][T11504] ? new_sync_read+0x6e0/0x6e0 [ 1114.122078][T11504] ? lock_downgrade+0x820/0x820 [ 1114.126927][T11504] ? vfs_write+0x397/0x6b0 [ 1114.131347][T11504] ? apparmor_file_permission+0x26e/0x4e0 [ 1114.137081][T11504] vfs_write+0x59d/0x6b0 [ 1114.141326][T11504] ksys_write+0x12d/0x250 [ 1114.145653][T11504] ? __ia32_sys_read+0xb0/0xb0 [ 1114.150416][T11504] ? lock_is_held_type+0xb0/0xe0 [ 1114.155350][T11504] ? do_syscall_64+0x1c/0xe0 [ 1114.159954][T11504] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1114.165933][T11504] do_syscall_64+0x60/0xe0 [ 1114.170350][T11504] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1114.176236][T11504] RIP: 0033:0x416661 [ 1114.180113][T11504] Code: Bad RIP value. [ 1114.184168][T11504] RSP: 002b:00007f0dc91f7c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1114.192571][T11504] RAX: ffffffffffffffda RBX: 000000000050a700 RCX: 0000000000416661 [ 1114.200535][T11504] RDX: 0000000000000046 RSI: 0000000020000140 RDI: 00000000000000f0 [ 1114.208516][T11504] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1114.216482][T11504] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000006 [ 1114.224462][T11504] R13: 0000000000000c28 R14: 00000000004ce743 R15: 00007f0dc91f86d4 [ 1114.232457][T11505] CPU: 1 PID: 11505 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1114.242352][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.252409][T11505] Call Trace: [ 1114.255704][T11505] dump_stack+0x18f/0x20d [ 1114.260042][T11505] should_fail.cold+0x5/0x14 [ 1114.264641][T11505] ? __do_sys_memfd_create+0xf6/0x440 [ 1114.270013][T11505] should_failslab+0x5/0xf [ 1114.274437][T11505] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1114.280509][T11505] __kmalloc+0x6f/0x320 [ 1114.284676][T11505] ? strnlen_user+0x223/0x2f0 [ 1114.289349][T11505] __do_sys_memfd_create+0xf6/0x440 [ 1114.294527][T11505] ? ksys_write+0x1a5/0x250 [ 1114.299049][T11505] ? memfd_file_seals_ptr+0x150/0x150 [ 1114.304418][T11505] ? lock_is_held_type+0xb0/0xe0 [ 1114.309350][T11505] ? do_syscall_64+0x1c/0xe0 [ 1114.313921][T11505] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1114.319906][T11505] do_syscall_64+0x60/0xe0 [ 1114.324344][T11505] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1114.330298][T11505] RIP: 0033:0x45cba9 [ 1114.334215][T11505] Code: Bad RIP value. 13:36:52 executing program 5 (fault-call:4 fault-nth:3): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1114.338262][T11505] RSP: 002b:00007f89e4c6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1114.346663][T11505] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 000000000045cba9 [ 1114.354615][T11505] RDX: 0000000020000198 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1114.362564][T11505] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1114.370557][T11505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1114.378508][T11505] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:36:52 executing program 1 (fault-call:0 fault-nth:1): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1114.462960][T11510] FAT-fs (loop3): bogus number of reserved sectors [ 1114.473311][T11510] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1114.539826][T11516] FAULT_INJECTION: forcing a failure. [ 1114.539826][T11516] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.552529][T11516] CPU: 0 PID: 11516 Comm: syz-executor.5 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1114.562433][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.572505][T11516] Call Trace: [ 1114.575811][T11516] dump_stack+0x18f/0x20d [ 1114.580160][T11516] should_fail.cold+0x5/0x14 [ 1114.584766][T11516] ? nf_ct_ext_add+0x2b9/0x650 [ 1114.589536][T11516] should_failslab+0x5/0xf [ 1114.593969][T11516] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 1114.594543][T11520] FAULT_INJECTION: forcing a failure. [ 1114.594543][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.600041][T11516] __kmalloc_track_caller+0x6d/0x310 [ 1114.600067][T11516] krealloc+0x40/0xd0 [ 1114.600088][T11516] nf_ct_ext_add+0x2b9/0x650 [ 1114.600111][T11516] init_conntrack.constprop.0+0x3f4/0x1060 [ 1114.632284][T11516] ? __nf_conntrack_find_get+0x827/0xf30 [ 1114.637931][T11516] ? nf_conntrack_alloc+0x40/0x40 [ 1114.642955][T11516] ? hash_conntrack_raw+0x2dc/0x470 [ 1114.648161][T11516] ? ip6t_do_table+0xbb5/0x1920 [ 1114.653020][T11516] nf_conntrack_in+0x9b9/0x12a0 [ 1114.657884][T11516] ? nf_conntrack_find_get+0x40/0x40 [ 1114.663169][T11516] ? lock_acquire+0x1f1/0xad0 [ 1114.667845][T11516] ? ip6t_do_table+0x21/0x1920 [ 1114.672622][T11516] ? ipv6_defrag+0x79/0x4c0 [ 1114.677131][T11516] nf_hook_slow+0xc5/0x1e0 [ 1114.681555][T11516] nf_hook.constprop.0+0x35b/0x5d0 [ 1114.686672][T11516] ? ip6_rcv_finish_core.constprop.0.isra.0+0x570/0x570 [ 1114.693614][T11516] ? NF_HOOK_LIST.constprop.0+0x330/0x330 [ 1114.699330][T11516] ? tun_sock_write_space+0xf2/0x1d0 [ 1114.704628][T11516] ? ip6_rcv_finish_core.constprop.0.isra.0+0x570/0x570 [ 1114.711558][T11516] ? ip6_rcv_core+0xf6c/0x1bb0 [ 1114.716337][T11516] ipv6_rcv+0x9e/0x3c0 [ 1114.720415][T11516] ? ip6_rcv_core+0x1bb0/0x1bb0 [ 1114.725269][T11516] __netif_receive_skb_one_core+0x114/0x180 [ 1114.731167][T11516] ? __netif_receive_skb_core+0x3690/0x3690 [ 1114.737067][T11516] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1114.742186][T11516] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 1114.748515][T11516] ? ktime_get_with_offset+0x130/0x1a0 [ 1114.753977][T11516] __netif_receive_skb+0x27/0x1c0 [ 1114.759007][T11516] netif_receive_skb+0x159/0x990 [ 1114.763947][T11516] ? __netif_receive_skb+0x1c0/0x1c0 [ 1114.769236][T11516] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1114.775223][T11516] ? skb_set_owner_w+0x24e/0x400 [ 1114.780168][T11516] ? __tun_build_skb+0x1cd/0x260 [ 1114.785120][T11516] tun_rx_batched.isra.0+0x460/0x720 [ 1114.790414][T11516] ? tun_get_user+0x197f/0x35b0 [ 1114.795273][T11516] ? tun_sock_write_space+0x1d0/0x1d0 [ 1114.800649][T11516] ? lock_release+0x8d0/0x8d0 [ 1114.805331][T11516] ? lock_downgrade+0x820/0x820 [ 1114.810183][T11516] ? eth_type_trans+0x360/0x690 [ 1114.815034][T11516] ? __local_bh_enable_ip+0x159/0x250 [ 1114.820409][T11516] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1114.826382][T11516] ? tun_get_user+0x231f/0x35b0 [ 1114.831252][T11516] ? trace_hardirqs_on+0x5f/0x220 [ 1114.836278][T11516] tun_get_user+0x23b2/0x35b0 [ 1114.840968][T11516] ? lock_acquire+0x1f1/0xad0 [ 1114.845641][T11516] ? tun_build_skb+0xf30/0xf30 [ 1114.850408][T11516] ? tun_get+0x160/0x280 [ 1114.854660][T11516] ? aa_file_perm+0x5e2/0x1100 [ 1114.859441][T11516] tun_chr_write_iter+0xba/0x151 [ 1114.864381][T11516] new_sync_write+0x422/0x650 [ 1114.869063][T11516] ? new_sync_read+0x6e0/0x6e0 [ 1114.873825][T11516] ? lock_downgrade+0x820/0x820 [ 1114.878669][T11516] ? vfs_write+0x397/0x6b0 [ 1114.883090][T11516] ? apparmor_file_permission+0x26e/0x4e0 [ 1114.888820][T11516] vfs_write+0x59d/0x6b0 [ 1114.893067][T11516] ksys_write+0x12d/0x250 [ 1114.897398][T11516] ? __ia32_sys_read+0xb0/0xb0 [ 1114.902164][T11516] ? lock_is_held_type+0xb0/0xe0 [ 1114.907108][T11516] ? do_syscall_64+0x1c/0xe0 [ 1114.911703][T11516] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1114.917690][T11516] do_syscall_64+0x60/0xe0 [ 1114.922111][T11516] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1114.928002][T11516] RIP: 0033:0x416661 [ 1114.931881][T11516] Code: Bad RIP value. [ 1114.935937][T11516] RSP: 002b:00007f0dc91f7c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1114.944339][T11516] RAX: ffffffffffffffda RBX: 000000000050a700 RCX: 0000000000416661 [ 1114.952306][T11516] RDX: 0000000000000046 RSI: 0000000020000140 RDI: 00000000000000f0 [ 1114.960287][T11516] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1114.968251][T11516] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000006 [ 1114.976217][T11516] R13: 0000000000000c28 R14: 00000000004ce743 R15: 00007f0dc91f86d4 13:36:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x1279, &(0x7f0000000380)) [ 1114.984208][T11520] CPU: 1 PID: 11520 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1114.984400][T11516] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1114.994094][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.994100][T11520] Call Trace: [ 1114.994122][T11520] dump_stack+0x18f/0x20d [ 1114.994144][T11520] should_fail.cold+0x5/0x14 [ 1115.023427][T11520] should_failslab+0x5/0xf [ 1115.027854][T11520] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1115.033945][T11520] ? shmem_destroy_inode+0x70/0x70 [ 1115.039067][T11520] kmem_cache_alloc+0x46/0x3a0 [ 1115.043834][T11520] ? __alloc_fd+0x28d/0x600 [ 1115.048341][T11520] ? shmem_destroy_inode+0x70/0x70 [ 1115.053475][T11520] shmem_alloc_inode+0x18/0x40 [ 1115.058251][T11520] ? shmem_destroy_inode+0x70/0x70 [ 1115.063359][T11520] alloc_inode+0x61/0x230 [ 1115.067692][T11520] new_inode+0x27/0x2f0 [ 1115.071872][T11520] shmem_get_inode+0x96/0x930 [ 1115.076556][T11520] __shmem_file_setup+0xb8/0x310 [ 1115.081502][T11520] ? _copy_from_user+0x138/0x190 [ 1115.086447][T11520] __do_sys_memfd_create+0x269/0x440 [ 1115.091739][T11520] ? memfd_file_seals_ptr+0x150/0x150 [ 1115.092531][T11517] tc_dump_action: action bad kind [ 1115.097125][T11520] ? lock_is_held_type+0xb0/0xe0 [ 1115.097143][T11520] ? do_syscall_64+0x1c/0xe0 [ 1115.097160][T11520] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1115.097179][T11520] do_syscall_64+0x60/0xe0 [ 1115.121640][T11519] __nla_validate_parse: 1 callbacks suppressed [ 1115.121650][T11519] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1115.122067][T11520] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1115.122081][T11520] RIP: 0033:0x45cba9 [ 1115.122087][T11520] Code: Bad RIP value. [ 1115.122095][T11520] RSP: 002b:00007f89e4c6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1115.122116][T11520] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 000000000045cba9 [ 1115.167673][T11520] RDX: 0000000020000198 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1115.175642][T11520] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1115.183633][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 13:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x700}, 0x0) 13:36:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xa000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1115.191606][T11520] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:36:53 executing program 5 (fault-call:4 fault-nth:4): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:53 executing program 1 (fault-call:0 fault-nth:2): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1115.300854][T11527] tc_dump_action: action bad kind 13:36:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1115.339361][T11532] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 1115.390590][T11536] FAULT_INJECTION: forcing a failure. [ 1115.390590][T11536] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.404831][T11537] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1115.428473][T11536] CPU: 1 PID: 11536 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1115.438371][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.448422][T11536] Call Trace: [ 1115.451716][T11536] dump_stack+0x18f/0x20d [ 1115.456052][T11536] should_fail.cold+0x5/0x14 [ 1115.460653][T11536] should_failslab+0x5/0xf [ 1115.465082][T11536] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1115.471157][T11536] kmem_cache_alloc+0x46/0x3a0 [ 1115.472555][T11529] FAT-fs (loop3): bogus number of reserved sectors [ 1115.475926][T11536] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1115.475952][T11536] __d_alloc+0x2a/0x920 [ 1115.475975][T11536] d_alloc_pseudo+0x19/0x70 [ 1115.476000][T11536] alloc_file_pseudo+0xc6/0x250 [ 1115.501025][T11536] ? lockdep_init_map_waits+0x26a/0x890 [ 1115.506569][T11536] ? alloc_file+0x5a0/0x5a0 [ 1115.507427][T11529] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1115.511092][T11536] ? shmem_get_inode+0x499/0x930 [ 1115.511113][T11536] __shmem_file_setup+0x144/0x310 [ 1115.511131][T11536] ? _copy_from_user+0x138/0x190 [ 1115.511151][T11536] __do_sys_memfd_create+0x269/0x440 13:36:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x127a, &(0x7f0000000380)) [ 1115.511168][T11536] ? memfd_file_seals_ptr+0x150/0x150 [ 1115.511190][T11536] ? lock_is_held_type+0xb0/0xe0 [ 1115.548159][T11536] ? do_syscall_64+0x1c/0xe0 [ 1115.552765][T11536] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1115.558746][T11536] do_syscall_64+0x60/0xe0 [ 1115.563178][T11536] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1115.569069][T11536] RIP: 0033:0x45cba9 [ 1115.572956][T11536] Code: Bad RIP value. [ 1115.577017][T11536] RSP: 002b:00007f89e4c6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 13:36:53 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1115.585423][T11536] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 000000000045cba9 [ 1115.593416][T11536] RDX: 0000000020000198 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1115.601387][T11536] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1115.609354][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1115.617323][T11536] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:36:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xa270000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1115.722912][T11547] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 13:36:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1115.791355][T11553] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1115.800195][T11556] tc_dump_action: action bad kind 13:36:53 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x127b, &(0x7f0000000380)) [ 1115.858612][T11559] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1115.894252][T11557] FAT-fs (loop3): bogus number of reserved sectors 13:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xb00}, 0x0) [ 1115.920932][T11557] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1115.948581][T11566] tc_dump_action: action bad kind 13:36:54 executing program 1 (fault-call:0 fault-nth:3): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:36:54 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4f, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x127c, &(0x7f0000000380)) [ 1116.044172][T11557] FAT-fs (loop3): bogus number of reserved sectors [ 1116.062461][T11557] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1116.081797][T11576] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 1116.120415][T11578] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1116.147139][T11581] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1116.164450][T11582] tc_dump_action: action bad kind 13:36:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xb0a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:54 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1116.270781][T11589] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1116.296848][T11590] FAULT_INJECTION: forcing a failure. [ 1116.296848][T11590] name failslab, interval 1, probability 0, space 0, times 0 13:36:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 13:36:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x127d, &(0x7f0000000380)) [ 1116.412348][T11590] CPU: 0 PID: 11590 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1116.420626][T11601] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1116.422269][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.422277][T11590] Call Trace: [ 1116.422301][T11590] dump_stack+0x18f/0x20d [ 1116.422322][T11590] should_fail.cold+0x5/0x14 [ 1116.422344][T11590] should_failslab+0x5/0xf 13:36:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 13:36:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1116.422365][T11590] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1116.422387][T11590] kmem_cache_alloc+0x46/0x3a0 [ 1116.422418][T11590] __alloc_file+0x21/0x350 [ 1116.473460][T11590] alloc_empty_file+0x6d/0x170 [ 1116.478227][T11590] alloc_file+0x5e/0x5a0 [ 1116.482472][T11590] alloc_file_pseudo+0x165/0x250 [ 1116.487407][T11590] ? alloc_file+0x5a0/0x5a0 [ 1116.491914][T11590] ? shmem_get_inode+0x499/0x930 [ 1116.496857][T11590] __shmem_file_setup+0x144/0x310 [ 1116.501899][T11590] ? _copy_from_user+0x138/0x190 [ 1116.505885][T11599] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1116.506843][T11590] __do_sys_memfd_create+0x269/0x440 [ 1116.506864][T11590] ? memfd_file_seals_ptr+0x150/0x150 [ 1116.506880][T11590] ? lock_is_held_type+0xb0/0xe0 [ 1116.506901][T11590] ? do_syscall_64+0x1c/0xe0 [ 1116.506924][T11590] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1116.517034][T11603] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1116.519290][T11590] do_syscall_64+0x60/0xe0 [ 1116.519311][T11590] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1116.519324][T11590] RIP: 0033:0x45cba9 [ 1116.519330][T11590] Code: Bad RIP value. [ 1116.519337][T11590] RSP: 002b:00007f89e4c6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1116.573827][T11590] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 000000000045cba9 [ 1116.581795][T11590] RDX: 0000000020000198 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1116.589762][T11590] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1116.597729][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1116.605705][T11590] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:36:54 executing program 1 (fault-call:0 fault-nth:4): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:36:54 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1116.637472][T11595] FAT-fs (loop3): bogus number of reserved sectors [ 1116.650844][T11595] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1116.694126][T11611] tc_dump_action: action bad kind [ 1116.701227][T11610] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1116.738519][T11616] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1116.760554][T11621] FAULT_INJECTION: forcing a failure. [ 1116.760554][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.773509][T11621] CPU: 1 PID: 11621 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1116.783402][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.786817][T11622] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1116.793452][T11621] Call Trace: [ 1116.793477][T11621] dump_stack+0x18f/0x20d [ 1116.793498][T11621] should_fail.cold+0x5/0x14 [ 1116.793524][T11621] should_failslab+0x5/0xf [ 1116.817261][T11621] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1116.823333][T11621] kmem_cache_alloc+0x46/0x3a0 [ 1116.828098][T11621] ? __alloc_file+0x21/0x350 [ 1116.832694][T11621] security_file_alloc+0x34/0x170 [ 1116.837725][T11621] __alloc_file+0xd8/0x350 [ 1116.842148][T11621] alloc_empty_file+0x6d/0x170 [ 1116.846917][T11621] alloc_file+0x5e/0x5a0 [ 1116.851170][T11621] alloc_file_pseudo+0x165/0x250 [ 1116.856109][T11621] ? alloc_file+0x5a0/0x5a0 [ 1116.860614][T11621] ? shmem_get_inode+0x499/0x930 [ 1116.865559][T11621] __shmem_file_setup+0x144/0x310 [ 1116.870575][T11621] ? _copy_from_user+0x138/0x190 [ 1116.875508][T11621] __do_sys_memfd_create+0x269/0x440 [ 1116.880785][T11621] ? memfd_file_seals_ptr+0x150/0x150 [ 1116.886137][T11621] ? lock_is_held_type+0xb0/0xe0 [ 1116.891089][T11621] ? do_syscall_64+0x1c/0xe0 [ 1116.895670][T11621] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1116.901641][T11621] do_syscall_64+0x60/0xe0 [ 1116.906044][T11621] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1116.911924][T11621] RIP: 0033:0x45cba9 [ 1116.915798][T11621] Code: Bad RIP value. [ 1116.919849][T11621] RSP: 002b:00007f89e4c6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1116.928278][T11621] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 000000000045cba9 13:36:54 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x20000186, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 1116.936233][T11621] RDX: 0000000020000198 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1116.944198][T11621] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1116.952167][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1116.960126][T11621] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 [ 1116.995229][T11595] FAT-fs (loop3): bogus number of reserved sectors [ 1117.002768][T11595] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1117.079808][T11629] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xc000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x127e, &(0x7f0000000380)) 13:36:55 executing program 1 (fault-call:0 fault-nth:5): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:36:55 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xfffffdef, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1100}, 0x0) [ 1117.124782][T11631] tc_dump_action: action bad kind 13:36:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1117.214451][T11640] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1117.224484][T11643] FAULT_INJECTION: forcing a failure. [ 1117.224484][T11643] name failslab, interval 1, probability 0, space 0, times 0 13:36:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1200}, 0x0) 13:36:55 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1117.268520][T11646] tc_dump_action: action bad kind [ 1117.279960][T11643] CPU: 1 PID: 11643 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1117.289859][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.299911][T11643] Call Trace: [ 1117.303210][T11643] dump_stack+0x18f/0x20d [ 1117.307582][T11643] should_fail.cold+0x5/0x14 [ 1117.312185][T11643] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1117.317913][T11643] should_failslab+0x5/0xf [ 1117.322340][T11643] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1117.328413][T11643] __kmalloc+0x6f/0x320 [ 1117.332584][T11643] tomoyo_realpath_from_path+0xc3/0x620 [ 1117.338162][T11643] ? tomoyo_profile+0x42/0x50 [ 1117.342854][T11643] tomoyo_path_perm+0x212/0x3f0 [ 1117.347705][T11643] ? tomoyo_path_perm+0x1b8/0x3f0 [ 1117.352735][T11643] ? tomoyo_check_open_permission+0x380/0x380 [ 1117.358802][T11643] ? debug_check_no_obj_freed+0x20c/0x41c [ 1117.364562][T11643] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1117.370576][T11643] ? lock_is_held_type+0xb0/0xe0 [ 1117.375524][T11643] ? lock_is_held_type+0xb0/0xe0 [ 1117.380501][T11643] security_path_truncate+0xcf/0x140 [ 1117.385796][T11643] do_sys_ftruncate+0x3f7/0x570 [ 1117.390656][T11643] do_syscall_64+0x60/0xe0 [ 1117.395085][T11643] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1117.400976][T11643] RIP: 0033:0x45cb77 [ 1117.404864][T11643] Code: Bad RIP value. [ 1117.408927][T11643] RSP: 002b:00007f89e4c6ba68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d 13:36:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1117.417340][T11643] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 000000000045cb77 [ 1117.425315][T11643] RDX: 0000000020000198 RSI: 0000000008100000 RDI: 0000000000000004 [ 1117.433288][T11643] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1117.441256][T11643] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 1117.449228][T11643] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 [ 1117.482030][T11643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1117.483975][T11653] tc_dump_action: action bad kind 13:36:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1206}, 0x0) [ 1117.523215][T11642] FAT-fs (loop3): bogus number of reserved sectors [ 1117.529820][T11642] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1117.586177][T11643] FAT-fs (loop1): bogus logical sector size 549 [ 1117.594277][T11642] FAT-fs (loop3): bogus number of reserved sectors 13:36:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x127f, &(0x7f0000000380)) 13:36:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1117.637820][T11643] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1117.655167][T11642] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1117.771517][T11667] tc_dump_action: action bad kind 13:36:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1300}, 0x0) 13:36:55 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa02000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:55 executing program 1 (fault-call:0 fault-nth:6): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:36:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xc0a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x0) [ 1117.929569][T11675] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1117.938131][T11679] tc_dump_action: action bad kind [ 1117.963455][T11680] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1118.004967][T11683] FAULT_INJECTION: forcing a failure. [ 1118.004967][T11683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1118.018194][T11683] CPU: 1 PID: 11683 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1118.028079][T11683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.038128][T11683] Call Trace: [ 1118.041424][T11683] dump_stack+0x18f/0x20d [ 1118.045766][T11683] should_fail.cold+0x5/0x14 13:36:56 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa03000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1118.050367][T11683] ? unwind_get_return_address+0x51/0x90 [ 1118.056012][T11683] __alloc_pages_nodemask+0x1db/0x2a20 [ 1118.061473][T11683] ? lock_acquire+0x1f1/0xad0 [ 1118.066166][T11683] ? find_held_lock+0x2d/0x110 [ 1118.070952][T11683] ? is_bpf_text_address+0xa9/0x160 [ 1118.076149][T11683] ? warn_alloc+0x120/0x120 [ 1118.080631][T11683] ? mark_lock+0xbc/0x1710 [ 1118.085069][T11683] ? unwind_next_frame+0xe3b/0x1f90 [ 1118.090264][T11683] ? __lock_acquire+0xc1e/0x56e0 [ 1118.095215][T11683] ? __kernel_text_address+0x9/0x30 [ 1118.100406][T11683] ? unwind_get_return_address+0x51/0x90 [ 1118.106042][T11683] ? profile_setup.cold+0xc1/0xc1 [ 1118.111105][T11683] cache_grow_begin+0x71/0x430 [ 1118.115870][T11683] cache_alloc_refill+0x27b/0x340 [ 1118.120885][T11683] ? lockdep_hardirqs_off+0x66/0xa0 [ 1118.126075][T11683] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1118.131771][T11683] __kmalloc+0x2f5/0x320 [ 1118.136005][T11683] tomoyo_realpath_from_path+0xc3/0x620 [ 1118.141530][T11683] ? tomoyo_profile+0x42/0x50 [ 1118.146200][T11683] tomoyo_path_perm+0x212/0x3f0 [ 1118.151037][T11683] ? tomoyo_path_perm+0x1b8/0x3f0 [ 1118.156055][T11683] ? tomoyo_check_open_permission+0x380/0x380 [ 1118.162102][T11683] ? debug_check_no_obj_freed+0x20c/0x41c [ 1118.167801][T11683] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1118.173773][T11683] ? lock_is_held_type+0xb0/0xe0 [ 1118.178701][T11683] ? lock_is_held_type+0xb0/0xe0 [ 1118.183623][T11683] security_path_truncate+0xcf/0x140 [ 1118.188886][T11683] do_sys_ftruncate+0x3f7/0x570 [ 1118.193724][T11683] do_syscall_64+0x60/0xe0 [ 1118.198122][T11683] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1118.203993][T11683] RIP: 0033:0x45cb77 [ 1118.207858][T11683] Code: Bad RIP value. [ 1118.211906][T11683] RSP: 002b:00007f89e4c6ba68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1118.220300][T11683] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 000000000045cb77 [ 1118.228267][T11683] RDX: 0000000020000198 RSI: 0000000008100000 RDI: 0000000000000004 [ 1118.236224][T11683] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1118.244184][T11683] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 1118.252133][T11683] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:36:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c00, &(0x7f0000000380)) [ 1118.291930][T11683] FAT-fs (loop1): bogus logical sector size 549 [ 1118.298336][T11683] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:56 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa04000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1118.339211][T11693] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1118.349996][T11695] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:36:56 executing program 1 (fault-call:0 fault-nth:7): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:36:56 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa05000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1118.423523][T11697] FAT-fs (loop3): bogus number of reserved sectors [ 1118.434686][T11697] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 13:36:56 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa06000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1118.496592][T11697] FAT-fs (loop3): bogus number of reserved sectors [ 1118.533826][T11710] tc_dump_action: action bad kind 13:36:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c01, &(0x7f0000000380)) [ 1118.540944][T11697] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1118.560860][T11710] tc_dump_action: action bad kind [ 1118.592179][T11716] FAULT_INJECTION: forcing a failure. [ 1118.592179][T11716] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.617457][T11716] CPU: 1 PID: 11716 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1118.627356][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.637408][T11716] Call Trace: [ 1118.640709][T11716] dump_stack+0x18f/0x20d [ 1118.645046][T11716] should_fail.cold+0x5/0x14 [ 1118.649644][T11716] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1118.655021][T11716] should_failslab+0x5/0xf [ 1118.659448][T11716] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1118.665524][T11716] __kmalloc+0x6f/0x320 [ 1118.669691][T11716] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1118.675411][T11716] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1118.680969][T11716] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1118.686180][T11716] tomoyo_encode+0x28/0x50 [ 1118.690604][T11716] tomoyo_realpath_from_path+0x186/0x620 [ 1118.696249][T11716] ? tomoyo_profile+0x42/0x50 [ 1118.700933][T11716] tomoyo_path_perm+0x212/0x3f0 [ 1118.705784][T11716] ? tomoyo_path_perm+0x1b8/0x3f0 [ 1118.710817][T11716] ? tomoyo_check_open_permission+0x380/0x380 [ 1118.716912][T11716] ? debug_check_no_obj_freed+0x20c/0x41c [ 1118.722639][T11716] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1118.728653][T11716] ? lock_is_held_type+0xb0/0xe0 [ 1118.733601][T11716] ? lock_is_held_type+0xb0/0xe0 [ 1118.738555][T11716] security_path_truncate+0xcf/0x140 [ 1118.743849][T11716] do_sys_ftruncate+0x3f7/0x570 [ 1118.748709][T11716] do_syscall_64+0x60/0xe0 [ 1118.753136][T11716] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1118.759023][T11716] RIP: 0033:0x45cb77 [ 1118.762915][T11716] Code: Bad RIP value. [ 1118.766978][T11716] RSP: 002b:00007f89e4c6ba68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1118.775409][T11716] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 000000000045cb77 [ 1118.783379][T11716] RDX: 0000000020000198 RSI: 0000000008100000 RDI: 0000000000000004 13:36:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xd000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 13:36:56 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa07000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1118.791356][T11716] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1118.799307][T11716] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 1118.807254][T11716] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 [ 1118.843997][T11716] ERROR: Out of memory at tomoyo_realpath_from_path. 13:36:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1118.890582][T11716] FAT-fs (loop1): bogus logical sector size 549 [ 1118.897167][T11716] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1118.928086][T11730] tc_dump_action: action bad kind 13:36:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000380)) 13:36:57 executing program 1 (fault-call:0 fault-nth:8): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1119.008533][T11728] FAT-fs (loop3): bogus number of reserved sectors [ 1119.038065][T11728] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa21000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5865}, 0x0) [ 1119.102768][T11742] FAULT_INJECTION: forcing a failure. [ 1119.102768][T11742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1119.110414][T11740] tc_dump_action: action bad kind [ 1119.123544][T11742] CPU: 1 PID: 11742 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1119.132817][T11740] tc_dump_action: action bad kind [ 1119.133436][T11742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.133462][T11742] Call Trace: [ 1119.133486][T11742] dump_stack+0x18f/0x20d [ 1119.133509][T11742] should_fail.cold+0x5/0x14 [ 1119.160720][T11742] __alloc_pages_nodemask+0x1db/0x2a20 [ 1119.166205][T11742] ? __lock_acquire+0xc1e/0x56e0 [ 1119.171160][T11742] ? warn_alloc+0x120/0x120 [ 1119.175681][T11742] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1119.181672][T11742] alloc_pages_vma+0xdd/0x720 [ 1119.186360][T11742] shmem_alloc_page+0x11f/0x1f0 [ 1119.191212][T11742] ? shmem_swapin+0x230/0x230 [ 1119.195903][T11742] ? xas_start+0x151/0x530 [ 1119.200344][T11742] ? percpu_counter_add_batch+0x126/0x180 [ 1119.206070][T11742] ? __vm_enough_memory+0x184/0x360 [ 1119.211274][T11742] shmem_alloc_and_acct_page+0x161/0x8a0 [ 1119.216921][T11742] shmem_getpage_gfp+0x511/0x2430 [ 1119.221963][T11742] ? shmem_mfill_atomic_pte+0x1eb0/0x1eb0 [ 1119.227684][T11742] ? trace_hardirqs_on+0x5f/0x220 [ 1119.232709][T11742] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1119.237825][T11742] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 1119.243719][T11742] shmem_write_begin+0xf9/0x1d0 [ 1119.248569][T11742] generic_perform_write+0x20a/0x4f0 [ 1119.253859][T11742] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1119.259746][T11742] ? current_time+0x2c0/0x2c0 [ 1119.264419][T11742] ? down_write+0xdb/0x150 [ 1119.268832][T11742] __generic_file_write_iter+0x24b/0x610 [ 1119.274463][T11742] generic_file_write_iter+0x3a6/0x5c0 [ 1119.279923][T11742] ? __generic_file_write_iter+0x610/0x610 [ 1119.285743][T11742] new_sync_write+0x422/0x650 [ 1119.290412][T11742] ? new_sync_read+0x6e0/0x6e0 [ 1119.295175][T11742] ? lock_is_held_type+0xb0/0xe0 [ 1119.300113][T11742] ? __sb_start_write+0x1d5/0x470 [ 1119.305155][T11742] vfs_write+0x59d/0x6b0 [ 1119.309395][T11742] __x64_sys_pwrite64+0x1fd/0x250 [ 1119.314411][T11742] ? ksys_pwrite64+0x1a0/0x1a0 [ 1119.319165][T11742] ? lock_is_held_type+0xb0/0xe0 [ 1119.324096][T11742] ? do_syscall_64+0x1c/0xe0 [ 1119.328678][T11742] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1119.334650][T11742] do_syscall_64+0x60/0xe0 [ 1119.339061][T11742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1119.344947][T11742] RIP: 0033:0x416987 [ 1119.348824][T11742] Code: Bad RIP value. [ 1119.352898][T11742] RSP: 002b:00007f89e4c6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1119.361297][T11742] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 0000000000416987 [ 1119.369256][T11742] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000004 [ 1119.377216][T11742] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1119.385173][T11742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1119.393135][T11742] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:36:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xd0a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa38000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 1119.544406][T11742] FAT-fs (loop1): bogus number of reserved sectors [ 1119.605038][T11742] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c04, &(0x7f0000000380)) 13:36:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa48000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:57 executing program 1 (fault-call:0 fault-nth:9): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1119.758341][T11763] FAT-fs (loop3): bogus number of reserved sectors [ 1119.777604][T11763] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1119.853540][T11763] FAT-fs (loop3): bogus number of reserved sectors [ 1119.875797][T11763] FAT-fs (loop3): Can't find a valid FAT filesystem 13:36:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 13:36:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1119.910983][T11777] tc_dump_action: action bad kind 13:36:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa4c000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1119.966602][T11779] FAULT_INJECTION: forcing a failure. [ 1119.966602][T11779] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.010625][T11779] CPU: 0 PID: 11779 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1120.020535][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.030586][T11779] Call Trace: [ 1120.033884][T11779] dump_stack+0x18f/0x20d [ 1120.038227][T11779] should_fail.cold+0x5/0x14 [ 1120.042831][T11779] should_failslab+0x5/0xf [ 1120.047256][T11779] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1120.053337][T11779] kmem_cache_alloc+0x46/0x3a0 [ 1120.058118][T11779] __alloc_file+0x21/0x350 [ 1120.062541][T11779] alloc_empty_file+0x6d/0x170 [ 1120.067319][T11779] path_openat+0xe3/0x2750 [ 1120.071748][T11779] ? __lock_acquire+0x16e3/0x56e0 [ 1120.076785][T11779] ? path_lookupat+0x830/0x830 [ 1120.081581][T11779] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1120.087546][T11779] ? lock_is_held_type+0xb0/0xe0 [ 1120.092494][T11779] do_filp_open+0x17e/0x3c0 [ 1120.096978][T11779] ? may_open_dev+0xf0/0xf0 [ 1120.101462][T11779] ? __alloc_fd+0x28d/0x600 [ 1120.105966][T11779] ? lock_downgrade+0x820/0x820 [ 1120.110809][T11779] ? do_raw_spin_lock+0x120/0x2b0 [ 1120.115827][T11779] ? rwlock_bug.part.0+0x90/0x90 [ 1120.120788][T11779] ? _raw_spin_unlock+0x24/0x40 [ 1120.125630][T11779] ? __alloc_fd+0x28d/0x600 [ 1120.130144][T11779] do_sys_openat2+0x16f/0x3b0 [ 1120.134809][T11779] ? build_open_flags+0x650/0x650 [ 1120.139852][T11779] ? __sb_end_write+0xf8/0x1d0 [ 1120.144612][T11779] ? vfs_write+0x1b0/0x6b0 [ 1120.149055][T11779] __x64_sys_open+0x119/0x1c0 [ 1120.153722][T11779] ? do_sys_open+0x140/0x140 [ 1120.158313][T11779] ? do_syscall_64+0x1c/0xe0 [ 1120.162883][T11779] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1120.168849][T11779] do_syscall_64+0x60/0xe0 [ 1120.173253][T11779] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1120.179121][T11779] RIP: 0033:0x416921 [ 1120.183000][T11779] Code: Bad RIP value. [ 1120.187057][T11779] RSP: 002b:00007f89e4c6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1120.195455][T11779] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 0000000000416921 [ 1120.203416][T11779] RDX: 00007f89e4c6bb0a RSI: 0000000000000002 RDI: 00007f89e4c6bb00 13:36:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6800}, 0x0) [ 1120.211377][T11779] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1120.219324][T11779] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1120.227278][T11779] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:36:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xe0a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:58 executing program 1 (fault-call:0 fault-nth:10): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:36:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000380)) [ 1120.369268][T11793] __nla_validate_parse: 9 callbacks suppressed [ 1120.369278][T11793] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1120.388355][T11797] FAULT_INJECTION: forcing a failure. [ 1120.388355][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.403600][T11797] CPU: 0 PID: 11797 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1120.413496][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.423563][T11797] Call Trace: [ 1120.426865][T11797] dump_stack+0x18f/0x20d [ 1120.431209][T11797] should_fail.cold+0x5/0x14 [ 1120.435812][T11797] should_failslab+0x5/0xf [ 1120.440235][T11797] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1120.446310][T11797] kmem_cache_alloc+0x46/0x3a0 [ 1120.451084][T11797] ? __alloc_file+0x21/0x350 [ 1120.455679][T11797] security_file_alloc+0x34/0x170 [ 1120.460709][T11797] __alloc_file+0xd8/0x350 [ 1120.465134][T11797] alloc_empty_file+0x6d/0x170 [ 1120.469915][T11797] path_openat+0xe3/0x2750 [ 1120.474341][T11797] ? __lock_acquire+0x16e3/0x56e0 [ 1120.479380][T11797] ? path_lookupat+0x830/0x830 [ 1120.484156][T11797] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1120.490151][T11797] ? lock_is_held_type+0xb0/0xe0 [ 1120.495093][T11797] do_filp_open+0x17e/0x3c0 [ 1120.499601][T11797] ? may_open_dev+0xf0/0xf0 [ 1120.504108][T11797] ? __alloc_fd+0x28d/0x600 [ 1120.508615][T11797] ? lock_downgrade+0x820/0x820 [ 1120.513468][T11797] ? do_raw_spin_lock+0x120/0x2b0 13:36:58 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa60000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1120.518514][T11797] ? rwlock_bug.part.0+0x90/0x90 [ 1120.523502][T11797] ? _raw_spin_unlock+0x24/0x40 [ 1120.528346][T11797] ? __alloc_fd+0x28d/0x600 [ 1120.532834][T11797] do_sys_openat2+0x16f/0x3b0 [ 1120.537488][T11797] ? build_open_flags+0x650/0x650 [ 1120.542502][T11797] ? __sb_end_write+0xf8/0x1d0 [ 1120.547244][T11797] ? vfs_write+0x1b0/0x6b0 [ 1120.551637][T11797] __x64_sys_open+0x119/0x1c0 [ 1120.556322][T11797] ? do_sys_open+0x140/0x140 [ 1120.560890][T11797] ? do_syscall_64+0x1c/0xe0 [ 1120.565474][T11797] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1120.571439][T11797] do_syscall_64+0x60/0xe0 [ 1120.575849][T11797] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1120.581729][T11797] RIP: 0033:0x416921 [ 1120.585611][T11797] Code: Bad RIP value. [ 1120.589692][T11797] RSP: 002b:00007f89e4c6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1120.598095][T11797] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 0000000000416921 [ 1120.606068][T11797] RDX: 00007f89e4c6bb0a RSI: 0000000000000002 RDI: 00007f89e4c6bb00 13:36:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) [ 1120.614013][T11797] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1120.621969][T11797] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1120.629953][T11797] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:36:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x7400}, 0x0) 13:36:58 executing program 1 (fault-call:0 fault-nth:11): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1120.700561][T11809] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) [ 1120.751973][T11813] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c06, &(0x7f0000000380)) [ 1120.837026][T11817] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1120.875272][T11823] FAULT_INJECTION: forcing a failure. [ 1120.875272][T11823] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.888848][T11821] FAT-fs (loop3): bogus number of reserved sectors [ 1120.896535][T11819] tc_dump_action: action bad kind [ 1120.901856][T11821] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1120.919999][T11823] CPU: 1 PID: 11823 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1120.929904][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.939955][T11823] Call Trace: [ 1120.943275][T11823] dump_stack+0x18f/0x20d [ 1120.947617][T11823] should_fail.cold+0x5/0x14 [ 1120.952215][T11823] should_failslab+0x5/0xf [ 1120.956635][T11823] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1120.962710][T11823] kmem_cache_alloc+0x46/0x3a0 [ 1120.967487][T11823] __alloc_file+0x21/0x350 [ 1120.971913][T11823] alloc_empty_file+0x6d/0x170 [ 1120.976682][T11823] path_openat+0xe3/0x2750 [ 1120.981092][T11823] ? __lock_acquire+0x16e3/0x56e0 [ 1120.986098][T11823] ? path_lookupat+0x830/0x830 [ 1120.990841][T11823] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1120.996808][T11823] ? lock_is_held_type+0xb0/0xe0 [ 1121.001725][T11823] do_filp_open+0x17e/0x3c0 [ 1121.006206][T11823] ? may_open_dev+0xf0/0xf0 [ 1121.010690][T11823] ? __alloc_fd+0x28d/0x600 [ 1121.015188][T11823] ? lock_downgrade+0x820/0x820 [ 1121.020027][T11823] ? do_raw_spin_lock+0x120/0x2b0 [ 1121.025032][T11823] ? rwlock_bug.part.0+0x90/0x90 [ 1121.029954][T11823] ? _raw_spin_unlock+0x24/0x40 [ 1121.034796][T11823] ? __alloc_fd+0x28d/0x600 [ 1121.039314][T11823] do_sys_openat2+0x16f/0x3b0 [ 1121.043998][T11823] ? build_open_flags+0x650/0x650 [ 1121.049029][T11823] ? __sb_end_write+0xf8/0x1d0 [ 1121.053791][T11823] ? vfs_write+0x1b0/0x6b0 [ 1121.058237][T11823] __x64_sys_open+0x119/0x1c0 [ 1121.062922][T11823] ? do_sys_open+0x140/0x140 [ 1121.067515][T11823] ? do_syscall_64+0x1c/0xe0 [ 1121.072108][T11823] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1121.078095][T11823] do_syscall_64+0x60/0xe0 [ 1121.082517][T11823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1121.088399][T11823] RIP: 0033:0x416921 [ 1121.092272][T11823] Code: Bad RIP value. [ 1121.096332][T11823] RSP: 002b:00007f89e4c6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1121.104765][T11823] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 0000000000416921 [ 1121.112720][T11823] RDX: 00007f89e4c6bb0a RSI: 0000000000000002 RDI: 00007f89e4c6bb00 [ 1121.120684][T11823] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1121.128649][T11823] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 13:36:59 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa68000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:36:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1121.136598][T11823] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 [ 1121.297560][T11821] FAT-fs (loop3): bogus number of reserved sectors [ 1121.311647][T11821] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1121.321381][T11838] tc_dump_action: action bad kind [ 1121.335435][T11837] net_ratelimit: 18 callbacks suppressed [ 1121.335445][T11837] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:36:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xf0a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:36:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 13:36:59 executing program 1 (fault-call:0 fault-nth:12): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:36:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c07, &(0x7f0000000380)) 13:36:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:36:59 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa6c000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1121.369988][T11840] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1121.469082][T11848] tc_dump_action: action bad kind [ 1121.491741][T11851] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x612, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1121.540213][T11852] FAULT_INJECTION: forcing a failure. [ 1121.540213][T11852] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.585185][T11858] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1121.614859][T11855] FAT-fs (loop3): bogus number of reserved sectors [ 1121.635534][T11858] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1121.656028][T11860] tc_dump_action: action bad kind [ 1121.703384][T11855] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1121.746467][T11852] CPU: 1 PID: 11852 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1121.756412][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.766475][T11852] Call Trace: [ 1121.769815][T11852] dump_stack+0x18f/0x20d [ 1121.774161][T11852] should_fail.cold+0x5/0x14 [ 1121.778772][T11852] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1121.784151][T11852] should_failslab+0x5/0xf [ 1121.788574][T11852] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1121.794648][T11852] __kmalloc+0x6f/0x320 [ 1121.798811][T11852] ? __d_path+0x160/0x160 [ 1121.803140][T11852] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1121.808691][T11852] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1121.813927][T11852] tomoyo_encode+0x28/0x50 [ 1121.818352][T11852] tomoyo_realpath_from_path+0x186/0x620 [ 1121.824009][T11852] tomoyo_check_open_permission+0x272/0x380 [ 1121.829909][T11852] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 1121.835554][T11852] ? lookup_fast+0x6c0/0x6c0 [ 1121.840166][T11852] ? lock_downgrade+0x820/0x820 [ 1121.845009][T11852] ? do_raw_spin_lock+0x120/0x2b0 [ 1121.850032][T11852] tomoyo_file_open+0xa3/0xd0 [ 1121.854711][T11852] security_file_open+0x52/0x3f0 [ 1121.859644][T11852] do_dentry_open+0x358/0x11b0 [ 1121.864412][T11852] ? may_open+0x1e0/0x3d0 [ 1121.868753][T11852] path_openat+0x1bb9/0x2750 [ 1121.873345][T11852] ? path_lookupat+0x830/0x830 [ 1121.878100][T11852] ? lock_acquire+0x1f1/0xad0 [ 1121.882779][T11852] ? lock_is_held_type+0xb0/0xe0 [ 1121.887710][T11852] do_filp_open+0x17e/0x3c0 [ 1121.892206][T11852] ? may_open_dev+0xf0/0xf0 [ 1121.896725][T11852] ? do_raw_spin_lock+0x120/0x2b0 [ 1121.901752][T11852] ? rwlock_bug.part.0+0x90/0x90 [ 1121.906701][T11852] ? _raw_spin_unlock+0x24/0x40 [ 1121.911544][T11852] ? __alloc_fd+0x28d/0x600 [ 1121.916052][T11852] do_sys_openat2+0x16f/0x3b0 [ 1121.920720][T11852] ? build_open_flags+0x650/0x650 [ 1121.925754][T11852] ? __sb_end_write+0xf8/0x1d0 [ 1121.930508][T11852] ? vfs_write+0x1b0/0x6b0 [ 1121.934943][T11852] __x64_sys_open+0x119/0x1c0 [ 1121.939612][T11852] ? do_sys_open+0x140/0x140 [ 1121.944199][T11852] ? do_syscall_64+0x1c/0xe0 [ 1121.948779][T11852] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1121.954753][T11852] do_syscall_64+0x60/0xe0 [ 1121.959164][T11852] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1121.965044][T11852] RIP: 0033:0x416921 [ 1121.968931][T11852] Code: Bad RIP value. [ 1121.972996][T11852] RSP: 002b:00007f89e4c6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1121.981399][T11852] RAX: ffffffffffffffda RBX: 000000000050b440 RCX: 0000000000416921 [ 1121.989359][T11852] RDX: 00007f89e4c6bb0a RSI: 0000000000000002 RDI: 00007f89e4c6bb00 13:37:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1121.997323][T11852] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1122.005284][T11852] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1122.013245][T11852] R13: 0000000000000c5d R14: 00000000004cea29 R15: 00007f89e4c6c6d4 13:37:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa74000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 13:37:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c09, &(0x7f0000000380)) [ 1122.117482][T11865] tc_dump_action: action bad kind 13:37:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1122.174778][T11870] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1122.206213][T11871] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1122.229052][T11876] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1122.234721][T11877] tc_dump_action: action bad kind [ 1122.335805][T11852] ERROR: Out of memory at tomoyo_realpath_from_path. 13:37:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x10000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe903}, 0x0) 13:37:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa7a000000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c0a, &(0x7f0000000380)) 13:37:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1122.503084][T11893] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1122.525054][T11894] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1122.544913][T11901] tc_dump_action: action bad kind 13:37:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xb00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1122.546816][T11891] FAT-fs (loop1): bogus logical sector size 549 [ 1122.570277][T11903] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1122.570584][T11891] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1122.595028][T11899] FAT-fs (loop3): bogus number of reserved sectors 13:37:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 13:37:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00030000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c10, &(0x7f0000000380)) [ 1122.607323][T11899] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00002, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x100a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1122.839550][T11912] tc_dump_action: action bad kind 13:37:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1122.873464][T11913] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1122.907233][T11915] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 13:37:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00050000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1122.935157][T11922] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c59, &(0x7f0000000380)) [ 1123.003913][T11917] FAT-fs (loop1): bogus logical sector size 549 [ 1123.010190][T11917] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1123.070753][T11931] tc_dump_action: action bad kind [ 1123.079319][T11930] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:01 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00060000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1123.130133][T11917] FAT-fs (loop1): bogus logical sector size 549 [ 1123.137311][T11929] FAT-fs (loop3): bogus number of reserved sectors [ 1123.151661][T11929] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1123.169197][T11917] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x400300}, 0x0) [ 1123.193728][T11942] tc_dump_action: action bad kind 13:37:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xec0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:01 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00070000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1123.318183][T11929] FAT-fs (loop3): bogus number of reserved sectors [ 1123.339086][T11929] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1123.340164][T11956] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 1123.396692][T11960] tc_dump_action: action bad kind 13:37:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x110a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c5d, &(0x7f0000000380)) 13:37:01 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1123.499598][T11967] FAT-fs (loop1): bogus logical sector size 549 [ 1123.507045][T11967] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x120a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1123.633390][T11975] tc_dump_action: action bad kind 13:37:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 13:37:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00004, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x541b, &(0x7f0000000380)) 13:37:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x1072, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:01 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00210000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 13:37:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x1100, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1123.864315][T11996] tc_dump_action: action bad kind 13:37:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 13:37:01 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00380000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1123.910718][T11991] FAT-fs (loop3): bogus number of reserved sectors [ 1123.936497][T11991] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1124.021913][T12007] tc_dump_action: action bad kind 13:37:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x541c, &(0x7f0000000380)) 13:37:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x1200, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x13040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1124.100597][T11990] FAT-fs (loop1): bogus logical sector size 549 [ 1124.137145][T11990] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1124.156274][T12017] tc_dump_action: action bad kind 13:37:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 13:37:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00005, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:02 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa003f0000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x1206, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 13:37:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x5421, &(0x7f0000000380)) [ 1124.303387][T12025] FAT-fs (loop3): bogus number of reserved sectors [ 1124.331850][T12025] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1124.384886][T12034] tc_dump_action: action bad kind 13:37:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x1300, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:02 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00400000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) [ 1124.464324][T12025] FAT-fs (loop3): bogus number of reserved sectors 13:37:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00006, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:02 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00480000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1124.512387][T12025] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1124.535614][T12048] tc_dump_action: action bad kind 13:37:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x130a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 13:37:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x5450, &(0x7f0000000380)) 13:37:02 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa004c0000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1124.757074][T12065] tc_dump_action: action bad kind 13:37:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 13:37:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1124.781237][T12059] FAT-fs (loop1): bogus logical sector size 549 [ 1124.804677][T12059] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1124.873483][T12059] FAT-fs (loop1): bogus logical sector size 549 [ 1124.882049][T12059] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1124.897146][T12071] FAT-fs (loop3): bogus number of reserved sectors [ 1124.911033][T12071] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 13:37:02 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00600000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1124.920078][T12084] tc_dump_action: action bad kind 13:37:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x5451, &(0x7f0000000380)) 13:37:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1125.105291][T12071] FAT-fs (loop3): bogus number of reserved sectors [ 1125.120522][T12071] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1125.138119][T12101] tc_dump_action: action bad kind 13:37:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x14040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 13:37:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:03 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00680000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1125.267466][T12106] tc_dump_action: action bad kind 13:37:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x4800, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x5452, &(0x7f0000000380)) 13:37:03 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa006c0000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) [ 1125.342283][T12112] FAT-fs (loop3): bogus number of reserved sectors [ 1125.348827][T12112] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x4c00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1125.411936][T12119] tc_dump_action: action bad kind [ 1125.426237][T12112] FAT-fs (loop3): bogus number of reserved sectors [ 1125.435256][T12112] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1125.470671][T12125] __nla_validate_parse: 12 callbacks suppressed [ 1125.470706][T12125] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x140a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:03 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00740000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1125.599952][T12130] FAT-fs (loop1): bogus logical sector size 549 [ 1125.608364][T12130] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1125.618552][T12137] tc_dump_action: action bad kind [ 1125.696018][T12130] FAT-fs (loop1): bogus logical sector size 549 [ 1125.702860][T12130] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00008, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 13:37:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x5865, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:03 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa007a0000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x5460, &(0x7f0000000380)) [ 1125.844942][T12141] FAT-fs (loop3): bogus number of reserved sectors [ 1125.851482][T12141] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1125.977004][T12153] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x15040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1126.020341][T12152] tc_dump_action: action bad kind 13:37:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 13:37:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:04 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00ff0000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1126.060366][T12160] FAT-fs (loop1): bogus logical sector size 549 [ 1126.075356][T12160] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x5501, &(0x7f0000000380)) 13:37:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 1126.183753][T12174] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:04 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000001000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1126.253125][T12172] FAT-fs (loop3): bogus number of reserved sectors [ 1126.260128][T12160] FAT-fs (loop1): bogus logical sector size 549 [ 1126.266725][T12160] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1126.271487][T12172] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00009, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 1126.305382][T12188] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1126.319963][T12189] tc_dump_action: action bad kind 13:37:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x5509, &(0x7f0000000380)) [ 1126.425526][T12172] FAT-fs (loop3): bogus number of reserved sectors [ 1126.437791][T12172] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1126.476115][T12202] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1126.511555][T12204] tc_dump_action: action bad kind [ 1126.521422][T12205] net_ratelimit: 32 callbacks suppressed [ 1126.521432][T12205] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1126.537322][T12201] FAT-fs (loop1): bogus logical sector size 549 13:37:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 13:37:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x150a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1126.573957][T12201] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1126.610954][T12213] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x6800, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x12000000}, 0x0) 13:37:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x6364, &(0x7f0000000380)) [ 1126.690099][T12218] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0000a, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:04 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000002000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x6c00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1126.885243][T12231] tc_dump_action: action bad kind [ 1126.887512][T12220] FAT-fs (loop3): bogus number of reserved sectors [ 1126.932890][T12233] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1126.945246][T12220] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1126.952100][T12235] FAT-fs (loop1): bogus logical sector size 549 [ 1126.964507][T12234] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1126.972040][T12235] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x12060000}, 0x0) 13:37:05 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000003000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x7210, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1126.992296][T12239] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1127.029093][T12241] tc_dump_action: action bad kind 13:37:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x6611, &(0x7f0000000380)) 13:37:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x13000000}, 0x0) [ 1127.115853][T12251] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1127.129416][T12252] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1127.158068][T12255] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1127.190433][T12220] FAT-fs (loop3): bogus number of reserved sectors [ 1127.203727][T12220] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1127.223939][T12235] FAT-fs (loop1): bogus logical sector size 549 [ 1127.230370][T12235] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1127.254250][T12263] tc_dump_action: action bad kind [ 1127.271492][T12265] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x16040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:05 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000004000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x7400, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 13:37:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0000c, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x7a00, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1127.392236][T12270] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1127.398013][T12272] tc_dump_action: action bad kind [ 1127.409060][T12274] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:05 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000005000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x6681, &(0x7f0000000380)) [ 1127.617553][T12284] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1127.647255][T12286] tc_dump_action: action bad kind [ 1127.648749][T12285] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x8100, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) [ 1127.673957][T12288] FAT-fs (loop1): bogus logical sector size 549 [ 1127.682641][T12287] FAT-fs (loop3): bogus number of reserved sectors [ 1127.692026][T12287] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1127.697901][T12293] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1127.699554][T12288] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:05 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000006000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) [ 1127.816762][T12287] FAT-fs (loop3): bogus number of reserved sectors [ 1127.823707][T12287] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1127.837021][T12307] tc_dump_action: action bad kind [ 1127.854163][T12288] FAT-fs (loop1): bogus logical sector size 549 [ 1127.873606][T12288] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x160a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:05 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000007000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xc00e, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x8912, &(0x7f0000000380)) 13:37:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0000d, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 13:37:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000020000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 1128.127866][T12327] tc_dump_action: action bad kind 13:37:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000021000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1128.219698][T12333] FAT-fs (loop1): bogus logical sector size 549 [ 1128.236054][T12333] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1128.238955][T12334] FAT-fs (loop3): bogus number of reserved sectors [ 1128.255771][T12334] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x8922, &(0x7f0000000380)) 13:37:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) [ 1128.321639][T12347] tc_dump_action: action bad kind [ 1128.373552][T12333] FAT-fs (loop1): bogus logical sector size 549 [ 1128.374719][T12334] FAT-fs (loop3): bogus number of reserved sectors [ 1128.384800][T12333] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1128.391522][T12334] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x17040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000038000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 13:37:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0000e, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x8933, &(0x7f0000000380)) [ 1128.583571][T12375] tc_dump_action: action bad kind [ 1128.602385][T12372] FAT-fs (loop3): bogus number of reserved sectors 13:37:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) 13:37:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000003f000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1128.629190][T12372] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1128.774062][T12381] FAT-fs (loop1): bogus logical sector size 549 13:37:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x89e1, &(0x7f0000000380)) 13:37:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x170a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1128.847541][T12381] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000040000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1128.965320][T12396] tc_dump_action: action bad kind 13:37:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 13:37:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x17270000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1129.086052][T12381] FAT-fs (loop1): bogus logical sector size 549 13:37:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x400454ca, &(0x7f0000000380)) [ 1129.166496][T12381] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00010, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:07 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000048000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) [ 1129.272046][T12410] FAT-fs (loop3): bogus number of reserved sectors [ 1129.282390][T12410] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1129.328575][T12421] tc_dump_action: action bad kind 13:37:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:07 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000004c000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 13:37:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40045506, &(0x7f0000000380)) [ 1129.456630][T12410] FAT-fs (loop3): bogus number of reserved sectors [ 1129.471705][T12410] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1129.511710][T12442] tc_dump_action: action bad kind 13:37:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 13:37:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x18040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1129.575268][T12439] FAT-fs (loop1): bogus logical sector size 549 [ 1129.596206][T12439] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:07 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000060000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) [ 1129.691498][T12454] tc_dump_action: action bad kind [ 1129.759290][T12439] FAT-fs (loop1): bogus logical sector size 549 [ 1129.786328][T12439] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00023, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4004550a, &(0x7f0000000380)) 13:37:07 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000068000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe9030000}, 0x0) [ 1129.827345][T12462] FAT-fs (loop3): bogus number of reserved sectors [ 1129.860790][T12462] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1129.935405][T12475] tc_dump_action: action bad kind [ 1129.942564][T12462] FAT-fs (loop3): bogus number of reserved sectors [ 1129.964955][T12462] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000006c000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 13:37:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x180a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40046207, &(0x7f0000000380)) [ 1130.084330][T12484] FAT-fs (loop1): bogus logical sector size 549 [ 1130.117891][T12484] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000074000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1130.148543][T12496] tc_dump_action: action bad kind 13:37:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) [ 1130.234585][T12484] FAT-fs (loop1): bogus logical sector size 549 [ 1130.240861][T12484] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1130.264974][T12506] FAT-fs (loop3): bogus number of reserved sectors [ 1130.279473][T12506] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00048, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000007a000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1130.374007][T12519] tc_dump_action: action bad kind 13:37:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 1130.501331][T12526] FAT-fs (loop1): bogus logical sector size 549 [ 1130.540307][T12534] tc_dump_action: action bad kind [ 1130.551905][T12506] FAT-fs (loop3): bogus number of reserved sectors [ 1130.567754][T12526] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40049409, &(0x7f0000000380)) [ 1130.601399][T12506] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x19040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff8d000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0004c, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1130.696697][T12539] __nla_validate_parse: 19 callbacks suppressed [ 1130.696710][T12539] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 1130.849287][T12557] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1130.870662][T12546] FAT-fs (loop3): bogus number of reserved sectors [ 1130.886887][T12546] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 13:37:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffff5000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1130.901425][T12560] tc_dump_action: action bad kind 13:37:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40081271, &(0x7f0000000380)) [ 1131.002607][T12561] FAT-fs (loop1): bogus logical sector size 549 [ 1131.025665][T12567] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1131.049749][T12561] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1131.108594][T12546] FAT-fs (loop3): bogus number of reserved sectors [ 1131.116633][T12546] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00068, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:09 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000ff000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1131.239090][T12585] tc_dump_action: action bad kind 13:37:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 13:37:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x190a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40085503, &(0x7f0000000380)) 13:37:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0006c, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:09 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa8dffffff000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x2) [ 1131.418009][T12593] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1131.513786][T12607] tc_dump_action: action bad kind 13:37:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x3) [ 1131.547706][T12606] net_ratelimit: 34 callbacks suppressed [ 1131.547718][T12606] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1131.566838][T12614] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1131.572320][T12605] FAT-fs (loop1): bogus logical sector size 549 13:37:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:09 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaf5ffffff000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40095505, &(0x7f0000000380)) [ 1131.601687][T12605] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1131.626299][T12615] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4) [ 1131.800218][T12605] FAT-fs (loop1): bogus logical sector size 549 [ 1131.812484][T12605] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1131.836928][T12602] FAT-fs (loop3): bogus number of reserved sectors 13:37:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40101283, &(0x7f0000000380)) [ 1131.860480][T12602] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1131.868631][T12632] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1131.885384][T12634] tc_dump_action: action bad kind [ 1131.911309][T12636] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1131.925480][T12637] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1132.002365][T12636] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1a040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xb000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00074, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:10 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40101286, &(0x7f0000000380)) 13:37:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x5) [ 1132.200458][T12648] tc_dump_action: action bad kind [ 1132.237436][T12649] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1132.272717][T12651] FAT-fs (loop1): bogus logical sector size 549 [ 1132.279011][T12651] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6) 13:37:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xc000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1132.327534][T12659] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1132.401690][T12653] FAT-fs (loop3): bogus number of reserved sectors [ 1132.412734][T12653] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:10 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00030000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1a0a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x7) 13:37:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0007a, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1132.446298][T12667] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1132.468584][T12670] tc_dump_action: action bad kind 13:37:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xe000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40101288, &(0x7f0000000380)) 13:37:10 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00040000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1132.568010][T12674] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1132.578286][T12675] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x8) 13:37:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x9) [ 1132.718444][T12691] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1132.721420][T12682] FAT-fs (loop1): bogus logical sector size 549 [ 1132.749841][T12690] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1132.758441][T12682] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:10 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00050000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1132.773237][T12693] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1132.777092][T12694] tc_dump_action: action bad kind 13:37:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x401070c9, &(0x7f0000000380)) 13:37:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xa) [ 1132.929391][T12682] FAT-fs (loop1): bogus logical sector size 549 [ 1132.936475][T12695] FAT-fs (loop3): bogus number of reserved sectors [ 1132.961019][T12695] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1132.970319][T12682] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1b040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xb) [ 1133.079325][T12713] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00148, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x10000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:11 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00060000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xc) 13:37:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x401070ca, &(0x7f0000000380)) 13:37:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xe) 13:37:11 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00070000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1133.437131][T12719] FAT-fs (loop3): bogus number of reserved sectors [ 1133.445706][T12738] FAT-fs (loop1): bogus logical sector size 549 [ 1133.454451][T12719] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1133.460090][T12738] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x401070cd, &(0x7f0000000380)) [ 1133.525897][T12749] tc_dump_action: action bad kind 13:37:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x11000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf) 13:37:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1b270000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:11 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00210000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1133.657368][T12738] FAT-fs (loop1): bogus logical sector size 549 [ 1133.686114][T12760] tc_dump_action: action bad kind [ 1133.691294][T12738] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10) 13:37:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00300, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x12000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:11 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00380000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1133.893654][T12778] tc_dump_action: action bad kind 13:37:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x11) 13:37:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x12060000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x40186366, &(0x7f0000000380)) [ 1133.939190][T12776] FAT-fs (loop3): bogus number of reserved sectors [ 1133.946211][T12772] FAT-fs (loop1): bogus logical sector size 549 [ 1133.960962][T12776] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1133.980653][T12772] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:12 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00480000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1134.061956][T12792] tc_dump_action: action bad kind 13:37:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x12) 13:37:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x13000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1134.118955][T12776] FAT-fs (loop3): bogus number of reserved sectors [ 1134.187978][T12772] FAT-fs (loop1): bogus logical sector size 549 [ 1134.206470][T12776] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1134.262675][T12772] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1134.327128][T12805] tc_dump_action: action bad kind 13:37:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x401870c8, &(0x7f0000000380)) 13:37:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1c040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:12 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa004c0000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc003fa, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x13) 13:37:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:12 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00600000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x48) 13:37:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x401870cb, &(0x7f0000000380)) [ 1134.662344][T12821] tc_dump_action: action bad kind 13:37:12 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00680000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x30000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4c) 13:37:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x401870cc, &(0x7f0000000380)) [ 1134.802518][T12831] FAT-fs (loop3): bogus number of reserved sectors [ 1134.810313][T12831] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1134.833770][T12832] FAT-fs (loop1): bogus logical sector size 549 [ 1134.848720][T12832] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1134.926913][T12848] tc_dump_action: action bad kind [ 1134.931812][T12831] FAT-fs (loop3): bogus number of reserved sectors [ 1134.959421][T12831] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1134.990354][T12832] FAT-fs (loop1): bogus logical sector size 549 [ 1134.997694][T12832] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1d040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x60) 13:37:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00413, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:13 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa006c0000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3f000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4020940d, &(0x7f0000000380)) 13:37:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x68) [ 1135.287299][T12864] tc_dump_action: action bad kind 13:37:13 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00740000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6c) 13:37:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x40000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1135.393046][T12870] FAT-fs (loop3): bogus number of reserved sectors [ 1135.403645][T12872] FAT-fs (loop1): bogus logical sector size 549 [ 1135.410058][T12872] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1135.426526][T12870] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x41015500, &(0x7f0000000380)) 13:37:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x74) [ 1135.593747][T12870] FAT-fs (loop3): bogus number of reserved sectors [ 1135.605356][T12870] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1135.612032][T12872] FAT-fs (loop1): bogus logical sector size 549 [ 1135.624181][T12872] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1135.655670][T12891] tc_dump_action: action bad kind 13:37:13 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa007a0000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x7a) 13:37:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00414, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1e000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:13 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000300000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1135.800313][T12902] __nla_validate_parse: 10 callbacks suppressed [ 1135.800323][T12902] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x80041284, &(0x7f0000000380)) [ 1135.851727][T12904] tc_dump_action: action bad kind 13:37:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x4c000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf0) [ 1135.922777][T12906] FAT-fs (loop3): bogus number of reserved sectors [ 1135.929330][T12906] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1135.929933][T12911] FAT-fs (loop1): bogus logical sector size 549 [ 1135.951060][T12911] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:13 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000500000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1136.118005][T12911] FAT-fs (loop1): bogus logical sector size 549 [ 1136.124979][T12911] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1136.141510][T12906] FAT-fs (loop3): bogus number of reserved sectors 13:37:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x80041285, &(0x7f0000000380)) 13:37:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00415, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1136.163671][T12906] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1136.173357][T12927] tc_dump_action: action bad kind [ 1136.198030][T12928] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1e040000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x300) 13:37:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1136.303780][T12934] FAT-fs (loop1): bogus logical sector size 549 13:37:14 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000600000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1136.361509][T12934] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x80081270, &(0x7f0000000380)) 13:37:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x3e9) [ 1136.438050][T12942] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:14 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000700000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x500) [ 1136.581937][T12943] FAT-fs (loop3): bogus number of reserved sectors [ 1136.601638][T12955] tc_dump_action: action bad kind [ 1136.608012][T12943] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x65580000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00416, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x80081272, &(0x7f0000000380)) [ 1136.688481][T12960] net_ratelimit: 30 callbacks suppressed [ 1136.688492][T12960] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1136.725352][T12963] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:14 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00002000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1136.735312][T12964] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1136.831157][T12943] FAT-fs (loop3): bogus number of reserved sectors [ 1136.851174][T12943] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1136.873603][T12971] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1136.886195][T12975] tc_dump_action: action bad kind [ 1136.916402][T12979] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1f000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x600) 13:37:14 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00002100000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x68000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1137.004089][T12978] FAT-fs (loop1): bogus logical sector size 549 [ 1137.013094][T12978] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1137.055730][T12989] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1137.058777][T12990] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1137.066683][T12991] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x80085502, &(0x7f0000000380)) 13:37:15 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00003800000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1137.149376][T12978] FAT-fs (loop1): bogus logical sector size 549 [ 1137.170708][T12978] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1137.181392][T12998] FAT-fs (loop3): bogus number of reserved sectors 13:37:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x612) 13:37:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x6c000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1137.197646][T12998] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1137.236897][T13005] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1137.272910][T13008] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:15 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00003f00000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1137.311375][T13011] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00417, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x700) 13:37:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x80086301, &(0x7f0000000380)) [ 1137.438601][T12998] FAT-fs (loop3): bogus number of reserved sectors [ 1137.462277][T12998] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1137.508064][T13017] tc_dump_action: action bad kind [ 1137.533355][T13021] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x72100000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x900) 13:37:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x20000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1137.587665][T13025] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1137.610245][T13028] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:15 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00004000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xa00) [ 1137.689590][T13031] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1137.708064][T13026] FAT-fs (loop1): bogus logical sector size 549 13:37:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc0045878, &(0x7f0000000380)) [ 1137.736435][T13026] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1137.778647][T13026] FAT-fs (loop1): bogus logical sector size 549 [ 1137.793472][T13026] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1137.810403][T13041] FAT-fs (loop3): bogus number of reserved sectors 13:37:15 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00004800000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xb00) [ 1137.824367][T13043] tc_dump_action: action bad kind [ 1137.827128][T13041] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1137.849401][T13044] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x74000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00418, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc0045878, &(0x7f0000000380)) [ 1137.972709][T13055] tc_dump_action: action bad kind 13:37:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x7a000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:16 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00004c00000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1138.034050][T13041] FAT-fs (loop3): bogus number of reserved sectors [ 1138.042024][T13041] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1138.072674][T13062] FAT-fs (loop1): bogus logical sector size 549 13:37:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xc00) [ 1138.105880][T13062] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x20100000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:16 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00006000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:16 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00006800000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xe00) [ 1138.251735][T13076] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1138.280503][T13062] FAT-fs (loop1): bogus logical sector size 549 [ 1138.292178][T13062] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc0085504, &(0x7f0000000380)) [ 1138.385443][T13084] tc_dump_action: action bad kind 13:37:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc00c642d, &(0x7f0000000380)) 13:37:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00419, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x23000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:16 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00006c00000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x81000000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xec0) 13:37:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf00) 13:37:16 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00007400000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1138.715174][T13114] FAT-fs (loop1): bogus logical sector size 549 [ 1138.721788][T13114] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1138.722497][T13097] FAT-fs (loop3): bogus number of reserved sectors 13:37:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc0101282, &(0x7f0000000380)) [ 1138.760996][T13114] FAT-fs (loop1): bogus logical sector size 549 [ 1138.780158][T13118] tc_dump_action: action bad kind [ 1138.791352][T13097] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1138.800538][T13114] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x88a8ffff, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1100) 13:37:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0041a, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1138.964736][T13133] tc_dump_action: action bad kind 13:37:17 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00007a00000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1139.011090][T13097] FAT-fs (loop3): bogus number of reserved sectors [ 1139.025934][T13097] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1139.085273][T13139] tc_dump_action: action bad kind 13:37:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x34000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc0189436, &(0x7f0000000380)) 13:37:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1200) 13:37:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xc00e0000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1139.130062][T13140] FAT-fs (loop1): bogus logical sector size 549 [ 1139.144268][T13140] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1139.174657][T13149] tc_dump_action: action bad kind 13:37:17 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000ff00000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1206) [ 1139.325886][T13140] FAT-fs (loop1): bogus logical sector size 549 [ 1139.370208][T13140] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1139.381405][T13161] tc_dump_action: action bad kind [ 1139.399988][T13161] tc_dump_action: action bad kind 13:37:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1300) 13:37:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0041b, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc020660b, &(0x7f0000000380)) 13:37:17 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000010086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xffffa888, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1139.514838][T13165] FAT-fs (loop3): bogus number of reserved sectors [ 1139.531780][T13165] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1139.645544][T13180] tc_dump_action: action bad kind [ 1139.753316][T13165] FAT-fs (loop3): bogus number of reserved sectors [ 1139.760167][T13165] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1139.790673][T13185] FAT-fs (loop1): bogus logical sector size 549 [ 1139.815981][T13185] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x3f000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x2000) 13:37:17 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000020086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc0306201, &(0x7f0000000380)) 13:37:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0041c, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1139.944179][T13194] tc_dump_action: action bad kind 13:37:18 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000030086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4800) 13:37:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0xc0481273, &(0x7f0000000380)) [ 1140.129765][T13202] FAT-fs (loop3): bogus number of reserved sectors [ 1140.154299][T13214] tc_dump_action: action bad kind [ 1140.155830][T13202] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1140.163363][T13215] FAT-fs (loop1): bogus logical sector size 549 13:37:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4c00) [ 1140.178929][T13215] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1140.309273][T13215] FAT-fs (loop1): bogus logical sector size 549 [ 1140.317041][T13215] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1140.330564][T13229] tc_dump_action: action bad kind 13:37:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x40000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:18 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000040086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x5865) 13:37:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:18 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x20, 0x8, 0x80000000, 0x1e666a09}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000300)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x20400) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$LOOP_GET_STATUS(r10, 0x4c03, &(0x7f0000000240)) 13:37:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0041d, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1140.590913][T13243] tc_dump_action: action bad kind 13:37:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1140.635708][T13246] FAT-fs (loop1): bogus logical sector size 549 13:37:18 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000050086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6000) [ 1140.686619][T13246] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x1f, 0x0, 0xc, 0x5, 0x8001, 0x81}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) 13:37:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6558) [ 1140.746392][T13252] FAT-fs (loop3): bogus number of reserved sectors [ 1140.827222][T13258] tc_dump_action: action bad kind [ 1140.845350][T13252] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0xf, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1140.869057][T13261] __nla_validate_parse: 11 callbacks suppressed [ 1140.869067][T13261] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1140.965931][T13252] FAT-fs (loop3): bogus number of reserved sectors [ 1140.974840][T13252] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x48000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00421, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6800) 13:37:19 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000060086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x10, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x40240) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x10, 0xa4aa, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000085) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f0000000040)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r8, 0x4c03, &(0x7f0000000380)) 13:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6c00) [ 1141.138461][T13281] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x13, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1141.275934][T13293] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1141.286084][T13290] FAT-fs (loop3): bogus number of reserved sectors [ 1141.293023][T13286] FAT-fs (loop1): bogus logical sector size 549 [ 1141.299294][T13286] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:19 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000070086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x1, 0x5a, 0x8, 0x1}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x220200, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f00000000c0)={0x3, 0x4, [0x9]}) bind$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x0, @loopback}}, 0x1e) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000380)) [ 1141.351080][T13290] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x7400) 13:37:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00500, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x4c000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2e8080, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 13:37:19 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000200086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1141.566622][T13306] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x54, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x7a00) [ 1141.658400][T13310] FAT-fs (loop1): bogus logical sector size 549 [ 1141.668274][T13310] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1141.721956][T13317] net_ratelimit: 32 callbacks suppressed [ 1141.721966][T13317] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0xc0, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:19 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000210086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1141.766059][T13310] FAT-fs (loop1): bogus logical sector size 549 [ 1141.772610][T13313] FAT-fs (loop3): bogus number of reserved sectors [ 1141.789974][T13325] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1141.797662][T13310] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1141.807946][T13313] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1141.859321][T13326] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x8100) 13:37:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00600, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1141.945238][T13330] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0xec0, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1141.995272][T13332] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x68000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xc00e) [ 1142.062693][T13333] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:20 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000380086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x33fe0, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1142.176921][T13337] FAT-fs (loop1): bogus logical sector size 549 [ 1142.183522][T13337] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1142.206954][T13344] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xe903) 13:37:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000240)) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='oom_score_adj\x00') r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) openat$cgroup_type(r4, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="86194923715674dba7a25f9089708f661c20f22de3b443a3748e90d039104b1ebe8958e9da063bc9716d8b9ba74c4c45c0029a320581318dc65600d71ac00d58a010da43e3f47a35d1c09613f62958a078b49f272ac2090000006d474c9262c05c53b9056f390273584170689c24a505c7bcc7b53a688fb8cfbe2ed0fbc8968c6f329514319fe1619dd56886b9aa58a0d1618e33e3202d53bc268d2484d176abc17d95f14ac0c5853a09aeb5e4efb0ed745e6a405dd6d6b204859f21fb56df53e60d7283ce457adb026cb07df25792adc486c1bd2bdcc449356e00174aef", 0xde}, {&(0x7f0000000300)="edc680a7036b8af1647e7cf203a2453c59ec6019c5ca508731dc706d935ed92f92faaa9e73f2ebc16fcd771fbcdb35989ade674f7384be9bbed892b12be34fdd9d35fa6da7280f57e46824cf05ddfa9c7b250169d56eb32f4396f4a6cfd31cea40f662d052caca2d2f1a046c44161f06", 0x70}, {&(0x7f0000000680)="6dee00e961434e8dc40626746d03c5c9884dd37817a2de461ed8917a1abf8943c4c157092c47fd241b114466db257bc222a0dbf3ad8e0a6e6d498a311307fec53fa7095ec60d34d22172c662c6c5e3e0c4b3295a37c56d544a8682c34ffffd1d22b291d5d093c7a0efd3b809030a9d8b10d942200b5153e686f2a8aebcebb669525d31f38b010d817e0d2947626202c35135f708fa973b0e152b3ad908d264fe55", 0xa1}, {&(0x7f0000000740)="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", 0xfb}], 0x4, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}], 0x58, 0x801}, 0x40010) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0xc6) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1142.280598][T13351] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1142.288572][T13337] FAT-fs (loop1): bogus logical sector size 549 [ 1142.293974][T13353] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1142.295134][T13345] FAT-fs (loop3): bogus number of reserved sectors 13:37:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf000) [ 1142.327155][T13337] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:20 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000003f0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x20000148, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x34000) [ 1142.375090][T13345] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1142.404945][T13359] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00700, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1142.510911][T13365] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1142.520759][T13367] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1142.570961][T13345] FAT-fs (loop3): bogus number of reserved sectors [ 1142.600175][T13345] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1142.605937][T13372] FAT-fs (loop1): bogus logical sector size 549 [ 1142.613543][T13372] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1142.623010][T13374] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x6c000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:20 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000400086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7ffff000, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x400300) [ 1142.716250][T13372] FAT-fs (loop1): bogus logical sector size 549 [ 1142.724995][T13372] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) write(r2, &(0x7f0000000000)="97c27c159b96a1f83c2adcb6e5680630ed208452b99a91588cfafc71ff8a1111744c01bf4fdb848be358b272d4100a84c2cf9e61cc48bf3770cdcd49a44e04484f581ed5fd618162f909b5a05d224afb0c2be71264bdcfe101ef88571cacd63d5c0ded76d7c8db09e4121d5ddb6ff8621cca66ead22d73596ee6dc2f954660095c4057ac99457865077bc3d34c0aebffe02c81176cbc84d6a437b0770351162b6044402ab5ac7ef61eb261c6856ae3a2eba7a21a9e0e1c", 0xb7) 13:37:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1142.797902][T13386] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1142.817311][T13384] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf0ffff) 13:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0xfffffdef, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1142.853980][T13389] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:20 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000480086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1000000) 13:37:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000000)=0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f0000000440)}}, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000380)) 13:37:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0xa, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1143.099429][T13400] FAT-fs (loop1): bogus logical sector size 549 [ 1143.107098][T13402] FAT-fs (loop3): bogus number of reserved sectors [ 1143.118078][T13400] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1143.133566][T13402] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1143.254991][T13400] FAT-fs (loop1): bogus logical sector size 549 [ 1143.262012][T13402] FAT-fs (loop3): bogus number of reserved sectors [ 1143.272252][T13400] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1143.287332][T13402] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x74000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:21 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000004c0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x2000000) 13:37:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0xf, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffa) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00a00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x3000000) 13:37:21 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000600086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x37, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1143.591352][T13437] FAT-fs (loop1): bogus logical sector size 549 [ 1143.591441][T13438] FAT-fs (loop3): bogus number of reserved sectors [ 1143.603647][T13437] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1143.615566][T13438] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4000000) 13:37:21 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000680086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x73, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x78000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00c00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x5000000) 13:37:22 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000006c0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0xaf0a, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:22 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000740086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6000000) 13:37:22 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000007a0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00d00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1144.160403][T13466] FAT-fs (loop3): bogus number of reserved sectors [ 1144.181592][T13466] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 13:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x7000000) [ 1144.252834][T13466] FAT-fs (loop3): bogus number of reserved sectors [ 1144.260874][T13466] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x7a000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:22 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00ffffff8d0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0xaf25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x8000000) 13:37:22 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00fffffff50086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x9000000) [ 1144.440941][T13497] FAT-fs (loop1): bogus logical sector size 549 [ 1144.468670][T13510] tc_dump_action: action bad kind [ 1144.475330][T13497] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1144.519922][T13515] FAT-fs (loop3): bogus number of reserved sectors [ 1144.527252][T13515] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000000)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xa000000) [ 1144.694001][T13515] FAT-fs (loop3): bogus number of reserved sectors [ 1144.714464][T13515] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1144.735017][T13497] FAT-fs (loop1): bogus logical sector size 549 [ 1144.745860][T13497] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1144.767731][T13534] tc_dump_action: action bad kind 13:37:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00e00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:22 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000ff0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x7ffffffe}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xb000000) 13:37:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x2, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:22 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa008dffffff0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xc000000) 13:37:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:23 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00f5ffffff0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1145.079189][T13556] tc_dump_action: action bad kind 13:37:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x3, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xe000000) 13:37:23 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000200000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1145.153377][T13561] FAT-fs (loop3): bogus number of reserved sectors [ 1145.162975][T13565] FAT-fs (loop1): bogus logical sector size 549 [ 1145.165659][T13561] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1145.184102][T13565] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1145.342922][T13578] tc_dump_action: action bad kind [ 1145.365382][T13561] FAT-fs (loop3): bogus number of reserved sectors [ 1145.372295][T13565] FAT-fs (loop1): bogus logical sector size 549 [ 1145.380891][T13565] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1145.399200][T13561] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01020, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x82020000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf000000) 13:37:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x4, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:23 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000300000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1145.577914][T13596] tc_dump_action: action bad kind 13:37:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x5, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:23 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000400000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10000000) [ 1145.659484][T13592] FAT-fs (loop1): bogus logical sector size 549 [ 1145.669685][T13592] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_pwait(r3, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3ff, &(0x7f0000000c40)={[0x8]}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000b80)={0x2, r5}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000940)=[{&(0x7f0000000000), 0x1}, {&(0x7f0000000040)=0x2, 0x2}, {&(0x7f0000000080)=0x2, 0x2}, {&(0x7f00000000c0)=0x2, 0x2}, {&(0x7f0000000100)=0x2, 0x2}, {&(0x7f0000000140)=0x2}, {&(0x7f0000000240), 0x2}, {&(0x7f0000000280), 0x2}, {&(0x7f00000002c0)=0x1, 0x1}, {&(0x7f0000000300), 0x2}, {&(0x7f0000000340)=0x2}, {&(0x7f0000000440)=0x1, 0x1}, {&(0x7f0000000480)=0x2, 0x1}, {&(0x7f00000004c0)=0x2}, {&(0x7f0000000500)=0x802, 0x1}, {&(0x7f0000000540)=0x1, 0x2}, {&(0x7f0000000580), 0x2}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=0x1}, {&(0x7f0000000640)=0x1, 0x1}, {&(0x7f0000000680)=0x1, 0xffff8f42}, {&(0x7f00000006c0)=0x2}, {&(0x7f0000000700), 0x2}, {&(0x7f0000000740)=0x1, 0x2}, {&(0x7f0000000780)=0x2, 0x2}, {&(0x7f00000007c0)=0x1}, {&(0x7f0000000800)=0x2, 0x1}, {&(0x7f0000000840)=0x2}, {&(0x7f00000008c0), 0x1}, {&(0x7f0000000900)=0x2}], 0xd, 0x1e, &(0x7f0000000b40)={0x77359400}, 0x0, 0x0) 13:37:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x11000000) 13:37:23 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000500000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1145.840835][T13602] FAT-fs (loop3): bogus number of reserved sectors [ 1145.848636][T13592] FAT-fs (loop1): bogus logical sector size 549 [ 1145.858449][T13602] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1145.867944][T13592] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1145.916765][T13617] __nla_validate_parse: 15 callbacks suppressed [ 1145.916776][T13617] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1145.984249][T13619] tc_dump_action: action bad kind 13:37:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01304, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x8cffffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x6, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:24 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000600000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x12000000) 13:37:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000008c0)='\x14\xccmP\xf3w\xb6\xa9Q\a@\\\x8b)\xcb\xec$!n\x9be\x13\x1d\xe5\x1c\x95\x14t_\x93\xe6\xd1\xff\a\x00\x00c8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xbe~\x18v\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eVv8\x00\x02\xb6a\f\xe1\x84\xeaw\nh}\xc3|p\x852\xd4\'\xf0\x89M-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\xc5\xe6\xa2p$\xb9\xce\x98\xedY\x8a\xa4ij\x1b\x9a\xfe\t\x95\xec26\x9dI\x14%\xbc4\xa1\xaf\x93\x9a\x10\xe9\x95\xd9\xa8\xb0\xf2bK!\xe6\xbb\xcd\xddJnC\b\xf3\xe1>\x1a\x8e\x8c\xba\xa6Z%\xed\x01{\x03\x03\x98\xcf\xb3\xbdE\xff\x83zz\xeaN\x96]4\xcc\x9b\xa5@\t.\xa4\xf0O\x17\xd1\xab\x86\xa4^\xa4J_\xcb\x1e\xd1\x99z\x1d\xd2\xd9\x05b\xf8\xef`\x00\xa7\xc9-x\xe3*\x13\x89\xcdn\xfa\xccK\xcfAb\xc6\xe1\x91[\'V\xbc\x8a\xb2(\xd5\x92\xd2%\'B\x94E3(\xde\xf4\xa3\xd9w\x10+\xce+s\xcb\x957\xa8/\x18\x87\x88\xde\"\xd4\xc3V\xd7\x03\x87~\xc5\xa5\xc8\x1a\x81c\xd3\xed\xe9\xe3\xcd\x98ni\xea\xe8\xf7\x8f\xc9~\xbd\n*X\xba\x96O\xdc\xbfN\xae$\f\xcc~)|\x06\xe1\xf4\x1e\xff\x94\x13\xd6,\xaet\xe3&c\x8f\xf1+\xa86\xdf\xc4H#\xe8/\xbaRM\xc7{\x90\xc1\xc6\xcfk\x90\xbe\x98\xcb\x14x\xfa\xc7@\xbaS\xe6\x95(\xe5\xcd&\x0f\xb4\x7f\x9c\r!)\xdb\x90(e\r\xed\x85\xfe\x1c\xc6!|K\n\xcf\x0e}u\x87bj\xb0C\xb5\xc4\xbe\xe2GD\xcf\x8a\xa5\x96\x812\xae\xef\xf1W\x98\xf8V\x8f\xfd\x1ey\xa7\xcbE%>\xf1\x10\xce\x00\xdfs\xe6\xa7\xd6\xe5\x95\v\x0f\xea\x1f\xb6\xf0*/\xf2\x89\rZ?A\x9f\xf7\xd7\xa3\xb5A\xbcp\xf2:I\x9b\xcf\fq\x04\xf0\xed\xf15\xac-\x017\xc1\xc6-\xcbl\x9c\x8ef\"\xae\xdb\x9f\x8cq\x97XA\xf2v\x1e\xebT\xa8V0\r\x89\x92\xd1\xb5\x85\x8b\xbbT8', 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r3 = dup2(r2, r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="0f3266baf80cb822a67685ef66bafc0c66ed653ef20f2a32660fc7330fc76e490f060f01cf660f388152f10f01c9643d01ed0000", 0x34}], 0x1, 0x3, &(0x7f00000001c0)=[@efer={0x2, 0xc001}], 0x1) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r5, 0x0, 0x1, &(0x7f0000000000)='\x00', r7}, 0x30) tgkill(r4, r8, 0x28) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1146.140331][T13628] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x12060000) 13:37:24 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000700000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x7, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1146.218306][T13636] FAT-fs (loop1): bogus logical sector size 549 [ 1146.228921][T13638] tc_dump_action: action bad kind [ 1146.240191][T13636] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0x8, 0x26}) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0xbe80bd4a0ad67379) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) ioctl$TCFLSH(r3, 0x540b, 0x1) [ 1146.299948][T13640] FAT-fs (loop3): bogus number of reserved sectors [ 1146.308129][T13644] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x13000000) 13:37:24 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00002100000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1146.349373][T13640] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1146.503805][T13636] FAT-fs (loop1): bogus logical sector size 549 [ 1146.510228][T13636] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1146.539168][T13662] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1146.560272][T13640] FAT-fs (loop3): bogus number of reserved sectors [ 1146.587243][T13640] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1146.672580][T13668] tc_dump_action: action bad kind 13:37:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01404, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xc0ed0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:24 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00003800000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x20000000) 13:37:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x8, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x14\xccmPn\x8a\x00\x00\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8&tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r\x04\x00\x00\x00\x00\x00\x00\x00\xe0\x0f\xf1W\xc9w\x10\xa9\xde|V\xf1\x9fV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\n\xc4\xcc\x04\x10h}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\xc9.\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xb5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26', 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r8, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000012810b00010500000000000000000400028008000500", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x28}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000000)={0x7, 0x0, 0x14, "4b7d10557b8d4605a15552a841cfb2294611b730fc1974e3cb62bc9d2b686ecee79169ec47eb89ae58f2ea0d69a6fe9fd87bf8b17763e102b2888314", 0x3b, "cb5623c585109c80873dc90b25a36df1989388f2e861527d8e9b8c600feb89ea2c67ba0dac95e83885e0eef59172947f75f0ff1a6bd593a2c8a25b43", 0x80}) [ 1146.864072][T13671] net_ratelimit: 38 callbacks suppressed [ 1146.864084][T13671] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:24 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00004800000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1146.921605][T13679] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1146.925373][T13677] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x48000000) [ 1147.052324][T13678] FAT-fs (loop3): bogus number of reserved sectors [ 1147.079808][T13676] FAT-fs (loop1): bogus logical sector size 549 [ 1147.102533][T13678] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1147.118805][T13682] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1147.140884][T13676] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4c000000) [ 1147.173143][T13691] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1147.187588][T13692] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1147.195891][T13694] tc_dump_action: action bad kind 13:37:25 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00004c00000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1147.225084][T13695] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1147.295943][T13676] FAT-fs (loop1): bogus logical sector size 549 [ 1147.330717][T13676] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5\xc6$Q\xdaKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3?\xea\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\x00\x00\x00\x00\x00\x00\x7f\x7f\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe8', 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) signalfd4(r2, &(0x7f0000000000)={[0xff]}, 0x8, 0x80000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x60000000) [ 1147.350675][T13700] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01504, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x9, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x111080, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0xa, 0x612c6280, 0x7, "c7ec4ddd85b1cec23dac"}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xf0ffffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1147.526459][T13708] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1147.537976][T13706] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x65580000) [ 1147.579649][T13709] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1147.614129][T13713] tc_dump_action: action bad kind 13:37:25 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00006000000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1147.650765][T13719] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1147.687403][T13715] FAT-fs (loop3): bogus number of reserved sectors 13:37:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x68000000) 13:37:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xa, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1147.709792][T13715] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1147.749406][T13727] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x70, 0xd8, 0x7f, 0xff, 0x17, 0x0, 0x5, 0x8504, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x7fffffff}, 0x52009, 0x1f, 0x3, 0x7, 0x4, 0xf4aa, 0x800}, r2, 0xc, r3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x40000, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000240)={0x3, {0x192, 0x7, 0x1, 0x1f}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r8, 0x4c03, &(0x7f0000000040)) 13:37:25 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00006800000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1147.760046][T13728] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1147.843074][T13723] FAT-fs (loop1): bogus logical sector size 549 [ 1147.869195][T13723] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1147.914461][T13737] tc_dump_action: action bad kind [ 1147.944519][T13715] FAT-fs (loop3): bogus number of reserved sectors [ 1147.962492][T13715] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xb, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01604, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1147.995328][T13743] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6c000000) [ 1148.081179][T13746] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xf5ffffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1148.139169][T13751] tc_dump_action: action bad kind 13:37:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01704, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 13:37:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x74000000) 13:37:26 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00006c00000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xc, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1148.287847][T13756] FAT-fs (loop3): bogus number of reserved sectors [ 1148.297799][T13756] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x7a000000) [ 1148.367709][T13769] tc_dump_action: action bad kind 13:37:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xe, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:26 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00007400000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x81000000) 13:37:26 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00007a00000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1148.432738][T13756] FAT-fs (loop3): bogus number of reserved sectors [ 1148.433096][T13768] FAT-fs (loop1): bogus logical sector size 549 [ 1148.440440][T13756] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1148.459089][T13768] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000300)={0x0, {0x7}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffff8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x22300}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) 13:37:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xf6030000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1148.654725][T13768] FAT-fs (loop1): bogus logical sector size 549 [ 1148.661125][T13768] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1148.738109][T13794] tc_dump_action: action bad kind [ 1148.836244][T13799] FAT-fs (loop3): bogus number of reserved sectors [ 1148.843001][T13799] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01804, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x88a8ffff) 13:37:26 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000003000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xf6ffffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xf, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:26 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000005000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x2}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) bind$l2tp(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast, 0x4}, 0x10) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="11b23274c9e4d3943864644b38168f0ecd39dffc82070501d55479fcf51fef59462f90f7ec8e2d8e4d9c2cedf530292b0d4191249486fefd3bdf88d1dee7e49e50917fbf8a6087e2ba8cb711fd94e323bf1c39746582f325198d10237c6c3edb37b9134a3b04833bf79f432ad439da49808b6d66c1e41f590767bf89e4de2391a41337f8230a1944b5b7d8737895a96a6d14abe6b5609b21a672bfc2d69dc3bad0244e1d2f7317cd605b6a09526242b329b86632dd5ed1fd7880f5cc62c3dd17def151cfd37a4ededfbe6d1f41a5b6c20979367c8a0b13501a8a80ce1396f826b9f84066fd43fc9ebeb9671df02466b38aaf4b", 0xf3, 0x1, 0x0, 0x2, r4}, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) pipe2(&(0x7f0000000240), 0x800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305839, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000340)) [ 1149.080987][T13808] FAT-fs (loop3): bogus number of reserved sectors [ 1149.113697][T13818] tc_dump_action: action bad kind 13:37:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x9effffff) [ 1149.131265][T13808] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01904, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x10, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xf9030000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:27 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000006000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x408001, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r3, 0x23, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x44) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000300)={{0x3, 0x3, 0x6, 0x2, 0x4}, 0x102d7bca, 0x6}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xc00e0000) [ 1149.478165][T13835] FAT-fs (loop1): bogus logical sector size 549 [ 1149.502213][T13835] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1149.581391][T13845] tc_dump_action: action bad kind 13:37:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01a04, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1149.692110][T13843] FAT-fs (loop3): bogus number of reserved sectors [ 1149.698654][T13843] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xe9030000) 13:37:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x11, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:27 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000007000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf0ffffff) [ 1149.821993][T13853] FAT-fs (loop1): bogus logical sector size 549 [ 1149.831022][T13853] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) [ 1149.907764][T13863] tc_dump_action: action bad kind [ 1149.969188][T13843] FAT-fs (loop3): bogus number of reserved sectors [ 1149.970879][T13853] FAT-fs (loop1): bogus logical sector size 549 [ 1149.982623][T13843] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x12, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:28 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000020000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1150.017693][T13853] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xf9fdffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:28 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000021000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xffffa888) [ 1150.170797][T13879] tc_dump_action: action bad kind 13:37:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01b04, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) write$ppp(r2, &(0x7f0000000000)="39da6bd201332716efc77e2e9ada6b88fb97ed4a286a2b29adc069b72facd7596ff266de1eb4953544b833ab9064556db57d88cd3109ed33b90380d1cd28cb203f3a742fab317b7b9a6a206cb9f0156df2899f947848a6ac61424daf3cc25d4aa4bb24dc0756e3edbd8090db3ed2a47e6f35dffe415f03cbeed1a8ced87786d7", 0x80) 13:37:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xfffff000) 13:37:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x13, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1150.330765][T13885] FAT-fs (loop3): bogus number of reserved sectors 13:37:28 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000038000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x30, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1150.391578][T13893] tc_dump_action: action bad kind 13:37:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xffffff7f) [ 1150.424536][T13885] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01c04, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:28 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000003f000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1150.563625][T13906] tc_dump_action: action bad kind [ 1150.598956][T13885] FAT-fs (loop3): bogus number of reserved sectors [ 1150.609265][T13885] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1150.710049][T13913] FAT-fs (loop1): bogus logical sector size 549 13:37:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfa030000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x48, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xffffff9e) 13:37:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c25ffc5024f54}, 0x4000) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000240)) [ 1150.768582][T13913] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:28 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000040000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1150.827820][T13921] tc_dump_action: action bad kind 13:37:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x4c, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xfffffff0) 13:37:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = dup3(r4, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x10, &(0x7f0000000300)={r6, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r6, 0x5}, 0x8) 13:37:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x40030000000000) 13:37:28 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000048000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc01d04, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1151.046883][T13913] FAT-fs (loop1): bogus logical sector size 549 [ 1151.062313][T13913] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1151.073420][T13928] FAT-fs (loop3): bogus number of reserved sectors [ 1151.079936][T13928] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:29 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000004c000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1151.172710][T13950] __nla_validate_parse: 4 callbacks suppressed [ 1151.172724][T13950] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1151.216589][T13955] tc_dump_action: action bad kind 13:37:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfbffffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc02000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x60, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:29 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000060000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf0ffffffffffff) 13:37:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x138, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x20}}, @NFCTH_TUPLE={0xec, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={[], [], @multicast1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @local}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c090) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r6, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="10002dbd7000fcdbdf25030000000500cd3300000000b8e795116643b7c30bf585eb3136945e5bfdf2f9fb7482d649f5894337e2e80a1250378df6c4235fb895b99a153937401632d45fe28a96b10c92f4fb00ec530a93d1296582c9e9d11d10435e8e3c1b68422be567bafcee43b0b7de91be312625be5e5acdda70d4682600e84a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044845}, 0x0) 13:37:29 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000068000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1151.441535][T13973] FAT-fs (loop3): bogus number of reserved sectors [ 1151.461499][T13965] FAT-fs (loop1): bogus logical sector size 549 [ 1151.462297][T13973] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:29 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000006c000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1151.500947][T13965] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1151.529881][T13973] FAT-fs (loop3): bogus number of reserved sectors [ 1151.536960][T13973] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1151.544324][T13981] tc_dump_action: action bad kind 13:37:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x100000000000000) 13:37:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x68, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfcfdffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x19, 0xa8180) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1151.690589][T13965] FAT-fs (loop1): bogus logical sector size 549 [ 1151.702740][T13965] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:29 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000074000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1151.748500][T13996] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1151.798801][T13997] tc_dump_action: action bad kind 13:37:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc02010, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x200000000000000) 13:37:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x6c, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1151.897516][T13998] FAT-fs (loop3): bogus number of reserved sectors [ 1151.905959][T13998] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1151.921860][T14009] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x300000000000000) [ 1151.965754][T14013] net_ratelimit: 34 callbacks suppressed [ 1151.965764][T14013] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1151.999161][T14014] tc_dump_action: action bad kind [ 1152.011694][T14018] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x200) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000000)={0x7ff, 0x6, @name="85e01ee590f63391db4bdff97a8618f22e59c0125e69f2dc019d82bf2d5fc3eb"}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1152.052641][T13998] FAT-fs (loop3): bogus number of reserved sectors [ 1152.059228][T14017] FAT-fs (loop1): bogus logical sector size 549 [ 1152.078727][T14017] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1152.094047][T13998] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x74, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x400000000000000) [ 1152.154621][T14022] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc02104, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfdfdffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:30 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000007a000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x500000000000000) [ 1152.309584][T14029] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.330275][T14030] tc_dump_action: action bad kind 13:37:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x7a, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1152.469214][T14032] FAT-fs (loop1): bogus logical sector size 549 [ 1152.479086][T14032] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1152.507075][T14039] tc_dump_action: action bad kind 13:37:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xf0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1152.566576][T14043] FAT-fs (loop3): bogus number of reserved sectors [ 1152.575518][T14049] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.581550][T14032] FAT-fs (loop1): bogus logical sector size 549 [ 1152.600546][T14043] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1152.608510][T14032] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x600000000000000) [ 1152.623608][T14051] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1152.647152][T14052] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:30 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000ff000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000000)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000000c0)={0x9a0000, 0x8, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a0001, 0x8000, [], @p_u32=&(0x7f0000000040)=0x4}}) recvfrom$l2tp(r7, &(0x7f0000000240)=""/223, 0xdf, 0x2000, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25060000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="3c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000167", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB="0c0001800800030002000000"], 0x68}, 0x1, 0x0, 0x0, 0x2c881}, 0x20000004) 13:37:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x700000000000000) 13:37:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc02300, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1152.731283][T14056] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.867495][T14043] FAT-fs (loop3): bogus number of reserved sectors [ 1152.923913][T14043] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1152.936343][T14066] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1153.036876][T14070] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1153.067258][T14066] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1153.101470][T14071] tc_dump_action: action bad kind 13:37:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc02746, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfe070400}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x300, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x600, 0xa6, 0xe}, 0x18) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r8 = dup3(r7, r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x10, &(0x7f0000000300)={r9, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={r9, 0xffbd, 0x0, 0x800, 0x4}, &(0x7f00000002c0)=0x18) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000000)) 13:37:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x800000000000000) 13:37:31 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000186dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x900000000000000) [ 1153.263991][T14079] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1153.422410][T14090] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1153.468049][T14094] FAT-fs (loop1): bogus logical sector size 549 [ 1153.482962][T14094] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1153.491495][T14092] tc_dump_action: action bad kind [ 1153.499514][T14093] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1153.514853][T14095] FAT-fs (loop3): bogus number of reserved sectors [ 1153.530846][T14099] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1153.540296][T14095] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x500, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xa00000000000000) 13:37:31 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1153.568849][T14094] FAT-fs (loop1): bogus logical sector size 549 [ 1153.614347][T14094] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1153.655011][T14106] tc_dump_action: action bad kind 13:37:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x600, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc02748, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1153.736938][T14111] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1153.755313][T14095] FAT-fs (loop3): bogus number of reserved sectors [ 1153.764067][T14095] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1153.793632][T14117] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1153.794209][T14116] tc_dump_action: action bad kind 13:37:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfeffff7f}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xb00000000000000) 13:37:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x612, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:31 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000386dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xc00000000000000) 13:37:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x2, 0x1f, 0x6, 0xe, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x7, @remote, 0x100}}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}, @sadb_x_sa2={0x2, 0x13, 0x80, 0x0, 0x0, 0x70bd25, 0x3506}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2b, 0x3505}]}, 0x70}}, 0x40000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x101000, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:32 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000486dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xe00000000000000) [ 1154.003485][T14123] FAT-fs (loop1): bogus logical sector size 549 [ 1154.012271][T14123] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:32 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000586dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1154.133063][T14144] tc_dump_action: action bad kind [ 1154.142411][T14123] FAT-fs (loop1): bogus logical sector size 549 [ 1154.148667][T14123] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf00000000000000) 13:37:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x700, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1154.241957][T14155] FAT-fs (loop3): bogus number of reserved sectors [ 1154.248846][T14155] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1000000000000000) [ 1154.449778][T14167] tc_dump_action: action bad kind [ 1154.479983][T14155] FAT-fs (loop3): bogus number of reserved sectors [ 1154.486733][T14155] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfeffffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:32 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000686dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc03f00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000000)={0x6, 0xffffff, "4335657144d90adfddf2ca69e9935b379b6b1d5ecd6aae2e", {0x8, 0x6}, 0xffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002728020000dbdf25100000000800040000000080081005000100008008000600010000000800060005000000"], 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x48081) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x2) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) ptrace$getregs(0xc, r6, 0xddc5, &(0x7f0000000080)=""/48) 13:37:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1100000000000000) 13:37:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x900, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:32 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000786dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1200000000000000) [ 1154.683912][T14180] FAT-fs (loop3): bogus number of reserved sectors [ 1154.699491][T14180] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1154.715771][T14182] tc_dump_action: action bad kind 13:37:32 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000002086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xa00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1154.782165][T14185] FAT-fs (loop1): bogus logical sector size 549 [ 1154.782434][T14180] FAT-fs (loop3): bogus number of reserved sectors [ 1154.790812][T14185] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1154.811822][T14180] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xb00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1154.891905][T14201] tc_dump_action: action bad kind 13:37:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xff000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:32 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000002186dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1206000000000000) [ 1155.105511][T14185] FAT-fs (loop1): bogus logical sector size 549 [ 1155.124777][T14185] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1155.148144][T14214] tc_dump_action: action bad kind 13:37:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc04000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:33 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snapshot\x00', 0x400000, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r2 = dup(r1) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000700), &(0x7f0000000740)=0x4) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000380)) 13:37:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xc00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1300000000000000) 13:37:33 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000003886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1155.238236][T14216] FAT-fs (loop3): bogus number of reserved sectors [ 1155.277746][T14216] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1155.387764][T14229] tc_dump_action: action bad kind 13:37:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xe00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xff030000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x2000000000000000) 13:37:33 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000003f86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1155.533263][T14234] FAT-fs (loop1): bogus logical sector size 549 [ 1155.560851][T14234] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4800000000000000) [ 1155.610211][T14240] tc_dump_action: action bad kind [ 1155.633244][T14246] FAT-fs (loop3): bogus number of reserved sectors [ 1155.640037][T14246] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4c00000000000000) 13:37:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xec0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1155.712567][T14234] FAT-fs (loop1): bogus logical sector size 549 [ 1155.719496][T14234] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1155.734506][T14246] FAT-fs (loop3): bogus number of reserved sectors [ 1155.741022][T14246] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc04627, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:33 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6000000000000000) [ 1155.882302][T14259] tc_dump_action: action bad kind 13:37:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xff070400}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xf00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6558000000000000) [ 1155.997159][T14267] FAT-fs (loop1): bogus logical sector size 549 [ 1156.027302][T14267] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:34 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1156.068453][T14273] tc_dump_action: action bad kind 13:37:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x1072, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1156.121624][T14274] FAT-fs (loop3): bogus number of reserved sectors [ 1156.129655][T14267] FAT-fs (loop1): bogus logical sector size 549 [ 1156.139522][T14267] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1156.151983][T14274] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6800000000000000) 13:37:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc04800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:34 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004c86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1156.281871][T14274] FAT-fs (loop3): bogus number of reserved sectors [ 1156.290805][T14287] tc_dump_action: action bad kind [ 1156.295432][T14274] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1156.354429][T14288] __nla_validate_parse: 17 callbacks suppressed [ 1156.354439][T14288] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x6c00000000000000) [ 1156.407404][T14292] FAT-fs (loop1): bogus logical sector size 549 13:37:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xff0f0000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:34 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1156.473157][T14292] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x1100, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1156.562867][T14302] tc_dump_action: action bad kind 13:37:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x1200, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1156.586126][T14303] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:34 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc04801, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x7400000000000000) 13:37:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x1206, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1156.680958][T14306] FAT-fs (loop3): bogus number of reserved sectors [ 1156.696674][T14308] tc_dump_action: action bad kind [ 1156.720813][T14306] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1156.814850][T14313] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1156.843497][T14316] tc_dump_action: action bad kind 13:37:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x7a00000000000000) 13:37:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x1300, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:34 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006c86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1156.860645][T14306] FAT-fs (loop3): bogus number of reserved sectors [ 1156.880323][T14306] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1156.960331][T14319] FAT-fs (loop1): bogus logical sector size 549 [ 1156.989261][T14319] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1156.998062][T14327] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffbffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1157.044766][T14328] net_ratelimit: 28 callbacks suppressed [ 1157.044775][T14328] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1157.058859][T14329] tc_dump_action: action bad kind 13:37:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x8100000000000000) 13:37:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r6}], 0x0, 0x2, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r6}], 0x27, 0x0, &(0x7f0000000080)="97b2dd69809836c41a557f291ff9ae78eb2bf053e33e508bd6772b4233903ad7af7b6c8d7ac7dc"}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x2000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1157.131693][T14330] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:35 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000007486dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1157.211281][T14319] FAT-fs (loop1): bogus logical sector size 549 [ 1157.244767][T14319] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1157.307392][T14345] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1157.347472][T14344] tc_dump_action: action bad kind 13:37:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc04827, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x88a8ffff00000000) [ 1157.362249][T14347] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1157.388921][T14346] FAT-fs (loop3): bogus number of reserved sectors [ 1157.401260][T14346] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x3000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r4, 0x23, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x402, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x577e, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r5 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:35 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000007a86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1157.466090][T14349] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x9effffff00000000) [ 1157.543674][T14355] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffdffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xffff1f00}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1157.693270][T14366] FAT-fs (loop3): bogus number of reserved sectors [ 1157.699994][T14366] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) sendmsg$can_raw(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x3, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "85a259fc9d35e26f"}, 0x10}, 0x1, 0x0, 0x0, 0x4004010}, 0x8800) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1157.746845][T14369] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1157.765180][T14372] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x3f00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xc00e000000000000) [ 1157.803356][T14370] FAT-fs (loop1): bogus logical sector size 549 [ 1157.809614][T14370] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1157.835517][T14373] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:35 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000ffffff8d86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1157.934305][T14381] tc_dump_action: action bad kind [ 1158.019994][T14387] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1158.044250][T14388] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1158.081936][T14370] FAT-fs (loop1): bogus logical sector size 549 [ 1158.092963][T14375] FAT-fs (loop3): bogus number of reserved sectors [ 1158.151862][T14375] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1158.159038][T14370] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1158.179182][T14395] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x4000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7, 0x800) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x9) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20080, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000240)) 13:37:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc04c00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xe903000000000000) 13:37:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffbff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:36 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000fffffff586dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xf0ffffff00000000) [ 1158.445942][T14405] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1158.464948][T14406] tc_dump_action: action bad kind 13:37:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x4800, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1158.516838][T14411] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xffffff7f00000000) [ 1158.573351][T14417] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1158.580687][T14419] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1158.612704][T14409] FAT-fs (loop3): bogus number of reserved sectors 13:37:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x4c00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:36 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000ff86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1158.624242][T14423] tc_dump_action: action bad kind [ 1158.640034][T14409] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x80000000, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1158.735768][T14418] FAT-fs (loop1): bogus logical sector size 549 [ 1158.759783][T14418] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffdf9}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1158.835497][T14436] tc_dump_action: action bad kind 13:37:36 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00008dffffff86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1158.878917][T14418] FAT-fs (loop1): bogus logical sector size 549 [ 1158.898219][T14418] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1158.994725][T14442] FAT-fs (loop3): bogus number of reserved sectors 13:37:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc06800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0xfffffffffffff000) 13:37:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x5865, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1159.054025][T14442] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:37 executing program 4: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000002c0)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x62d97091, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x10000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f0000000040)) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000480)={0x7, {{0x2, 0x4e20, @multicast1}}, 0x0, 0x6, [{{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @local}}]}, 0x390) write$eventfd(r3, &(0x7f0000000300), 0x8) 13:37:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x8e82, 0x0, 0x20, 0x1, 0xffffffffffff0000, 0x80, 0x5, 0x8}}, 0x43) 13:37:37 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000f5ffffff86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1159.192253][ T27] audit: type=1326 audit(1594474657.162:64): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14454 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f9ea code=0x0 [ 1159.231330][T14457] tc_dump_action: action bad kind 13:37:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffdfc}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1159.276767][T14461] FAT-fs (loop1): bogus logical sector size 549 [ 1159.292050][T14461] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x6000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1159.397980][T14461] FAT-fs (loop1): bogus logical sector size 549 [ 1159.407134][T14461] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000320061af00000000feffffff00000000a90ccff7b09173025026da0fe8fbbd4fd559cbd8c3d8b7a25d5dbd0e9e97d85b0ec5e69713f4c0fa73cf356e16975aca688d18c4103c7dabaa66"], 0x14}}, 0x0) 13:37:37 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000001000dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc06c00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x6558, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1159.546727][T14475] tc_dump_action: action bad kind [ 1159.548784][T14472] FAT-fs (loop3): bogus number of reserved sectors 13:37:37 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000005dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc07400, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1159.602070][T14472] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1159.658113][T14485] tc_dump_action: action bad kind [ 1159.704270][T14486] tc_dump_action: action bad kind 13:37:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x6800, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1159.742732][T14472] FAT-fs (loop3): bogus number of reserved sectors [ 1159.745830][T14491] FAT-fs (loop1): bogus logical sector size 549 [ 1159.749256][T14472] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1159.781642][T14491] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1159.858273][T14499] tc_dump_action: action bad kind [ 1159.870269][T14491] FAT-fs (loop1): bogus logical sector size 549 [ 1159.890577][T14491] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1159.999962][ T27] audit: type=1326 audit(1594474657.972:65): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14454 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f9ea code=0x0 13:37:38 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000046dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140001006d706c7300000000200002801c00020000000000000000000000a95e7f3dceefabad6144b4a10000000000000000000000000000040006000c0000"], 0x64}}, 0x0) 13:37:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffdfd}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x6c00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc07a00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x2, {0x7, 0xabbb2ae, "5eddfb5b1d8581b61e2fb0b7caab17c6b450ce27da8bc88e3cfeecbe224334092c37d915ba49f26b1b2162df16e57f3ce5ff0bcd177f3973aaa3a990d10fd35246b3f04844824bf20adffa5df9d1a5c858effa30df7eac314a6c8460f21f172ea6b1ff05c51d732b2bc33b430a186fc2e6f7ae2e3870d6aa54c457add472b93a965d94efaf6886e572b81bda22385897a3193ec7b695c0e97be7aac95cfdbd81b7bc9788603b646571d288619e751763ebb53005c7dda65b8b6da4438a8d7a78f6a1f3eaf1dc2ccfe57da1c78051580fc9c09750c0f32768b24e5b06bb5b68c9b212c958b1901a8081225e8473d8f63a64fdbec108a93e8a1fa6b5d802ab0dfe", 0xff, 0x1, 0x9, 0xfb, 0x7f, 0x93, 0x9, 0x1}, r3}}, 0x128) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000380)) [ 1160.180204][T14515] tc_dump_action: action bad kind 13:37:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c010100140001006d706c7300000000200002801c000200000000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x64}}, 0x0) [ 1160.214315][T14516] FAT-fs (loop3): bogus number of reserved sectors [ 1160.220882][T14518] FAT-fs (loop1): bogus logical sector size 549 [ 1160.220894][T14518] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x7210, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:38 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000002000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1160.283440][T14518] FAT-fs (loop1): bogus logical sector size 549 [ 1160.306163][T14518] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fchdir(r0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_ETHNAME={0xb, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x21}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0xc010) [ 1160.330554][T14516] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1160.362774][T14529] tc_dump_action: action bad kind 13:37:38 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x20000080) 13:37:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0fa03, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1160.393597][T14533] tc_dump_action: action bad kind 13:37:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x7400, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1160.483928][T14516] FAT-fs (loop3): bogus number of reserved sectors [ 1160.490473][T14516] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:38 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000003000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffdff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1160.611077][T14549] FAT-fs (loop1): bogus logical sector size 549 [ 1160.617540][T14549] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:38 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140001006d706c0000000000000000000000000000002800000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x64}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="940200006ad8e634710b30605927c8ebbfc76e94ef18fb704a207dfe9a900edb57d6f2d5252e5d4c61cff27afc358f3e8a4668c7717b7b5ae380741bd86650de4a0701029bee1715c119fbb4defd66164cd962b49ea01b1baffff604befbd10603d7fb32a11f1bdbe545", @ANYRES16=r2, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x4841}, 0x4000090) [ 1160.685530][T14554] tc_dump_action: action bad kind 13:37:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x7a00, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:38 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000004000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) socket$phonet(0x23, 0x2, 0x1) [ 1160.892664][T14560] FAT-fs (loop3): bogus number of reserved sectors 13:37:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140081006d166479b58b419f2e0002801c00020000000000000000000000ba0a000000004000000000000000040006000c00070000000000000000000c6b08009d32d6e791000000047d2a52e9a7c87aa7b6c0580369972debc9c2aea944bbef0b2392029eb5ae72cf2b489602dc464ca063ef496bac36ac7dc15a0cb64cd803c116176d8b314aabb42585ac3012214bebfb3315194b55448df2231cba6e5a"], 0x64}}, 0x0) 13:37:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0ff00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1160.943401][T14560] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1160.967838][T14573] tc_dump_action: action bad kind 13:37:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x8100, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xffffff7f}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000005000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1161.124224][T14578] tc_dump_action: action bad kind 13:37:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000240)) 13:37:39 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x10, &(0x7f0000000300)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r6 = dup3(r5, r4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x10, &(0x7f0000000300)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r3, 0x401, 0x8, 0x6, 0xfc01, 0x1000, 0x6ec9, 0x1f, {r7, @in6={{0xa, 0x7ff, 0x50, @ipv4={[], [], @private=0xa010101}, 0x3}}, 0x10001, 0x3, 0x4, 0x2, 0x4}}, &(0x7f0000000000)=0xb0) [ 1161.218934][T14585] tc_dump_action: action bad kind [ 1161.233535][T14584] FAT-fs (loop1): bogus logical sector size 549 13:37:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xc00e, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000006000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1161.269847][T14584] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1161.278953][T14588] FAT-fs (loop3): bogus number of reserved sectors [ 1161.306649][T14588] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1161.377580][T14599] tc_dump_action: action bad kind 13:37:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'wg1\x00', {0x2, 0x4e24, @private=0xa010101}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$rose(r2, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x64}}, 0x0) [ 1161.423828][T14584] FAT-fs (loop1): bogus logical sector size 549 [ 1161.437887][T14584] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1161.463337][T14588] FAT-fs (loop3): bogus number of reserved sectors 13:37:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xf000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1161.469856][T14588] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x3, 0x3}) memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x20000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000007000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1161.506391][T14610] tc_dump_action: action bad kind 13:37:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc0ff0f, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1161.548424][T14611] tc_dump_action: action bad kind 13:37:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xffffff8c}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:39 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ctinfo={0x0, 0x1c, 0x0, 0x0, {{0x0, 0x1, 'ctinfo\x00'}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x0, 0x3, {0xf1fd, 0x80000000, 0x7, 0x7, 0x6}}, @TCA_CTINFO_ACT={0x0, 0x3, {0x4, 0x8, 0x2, 0x1, 0x10001}}, @TCA_CTINFO_ZONE={0x0, 0x4, 0xfff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x47c2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x1}, @TCA_CTINFO_ACT={0x0, 0x3, {0x6, 0x6, 0x6, 0xe0000, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x1}]}, {}, {}, {0x0, 0x8, {0x2, 0x1}}}}]}]}, 0x64}}, 0x0) 13:37:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000021000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x1f, 0x81, 0x3ff, 0x1000}, 0x8) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1161.821174][T14631] tc_dump_action: action bad kind 13:37:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x34000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x10, &(0x7f0000000300)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r8 = dup3(r7, r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x10, &(0x7f0000000300)={r9, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) sendmsg$inet_sctp(r4, &(0x7f0000000640)={&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x200, @private2={0xfc, 0x2, [], 0x2}, 0x9}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000003c0)="b008b3a182d87341171209bca1c2c06d5f5e6f4e70522551afa93539fddf79d8b8d526cd86baacebc3c4c46765de65cbcb5f6f2e6335593c4f2351c26ca6347bf555eb2a0f730a1043487ba828809e3da5165f0b3582d9c63a444e6005320e668a124a6792199924911dee8cd67007a7600475a38dcc3fdda4ffc30b0518bc3b7f9064e4c001de4fdbc1632f3cea421201f108e51cf95c81a29fe3420d632748ba648c6e84e09f8ab57426140d6062dcdc9f2ce0d2ad81a1aa5e512030a4c57fb0ebfe702d3a0c1138faacf7114ea6f9feed", 0xd2}, {&(0x7f00000004c0)="16a1d274273b073d175cddca5e06474af864425d7977c18c9007b576c93f525340699b62e046539076c55d4d3d686807ce5b2f450ccead90c95da0bcb543d08d6a9bbcecba8d77c90ad86d5d6fb39d62e33baea7edee20d9dfd44c2023b9aba86d8f101a0fbf9de13edc4fdaa6d887c7c02b757e9bc6eaf175f843cbcc3b509bdfb145152c53528453ac80f2f452f4f346eccce35981a0d51cc88fdc2144cb3428557d6a5390a911472e62724ddbfca978328d29f3148d73288255b2d419525466a909e5e9c626a4eb88913044a57890e7acbcb6753db38973bf4c0a8094885c3e66a0", 0xe3}, {&(0x7f0000000200)="b1a4c478795cb9ebe937736137cbfa7a0a7d1724bbedeb0c1f2bd635cd8b244df7a7fd52e6a76d540b0c5b79d71a9ccec721ec10bab1484d2619f7547d544aed0f554049dbb8b0210ea93db9d3d0e7348c9ec522894a19cc5da3b20e9c60e39ed8ce228cae2119963aef01c852ff89fddcc134d3cfea532178647df0", 0x7c}], 0x3, &(0x7f00000005c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}, @init={0x18, 0x84, 0x0, {0x8, 0xa, 0x7, 0x4}}, @authinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x1, 0x20, r9}}], 0x68, 0x8001}, 0x4000080) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r5, 0x400, 0x0, 0x200, 0x2b}, &(0x7f0000000180)=0x18) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 1161.841784][T14632] FAT-fs (loop3): bogus number of reserved sectors [ 1161.856298][T14628] FAT-fs (loop1): bogus logical sector size 549 13:37:39 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000038000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1161.904095][T14632] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1161.913656][T14628] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:39 executing program 2: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) getsockname(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000180)=0x80) keyctl$session_to_parent(0x12) 13:37:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x400300, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1161.981726][T14643] tc_dump_action: action bad kind [ 1162.063342][T14628] FAT-fs (loop1): bogus logical sector size 549 [ 1162.068505][T14632] FAT-fs (loop3): bogus number of reserved sectors [ 1162.074189][T14628] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1162.099611][T14632] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x10, 0xb, "b96f8560fcbb84a1627fb0cba0897df126becbbcac5df2aa898c0ac4547f7283d592198ef317e307284b192e39c7f22d152b21cc2a179a814f50f192f61b75cd", "9662241fc2dc00d54192b9eba51c8926500a381b91da68c65ee6a1f58b467157", [0x1ff, 0x10000]}) 13:37:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffff0}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1162.146573][T14650] net_ratelimit: 20 callbacks suppressed [ 1162.146584][T14650] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1162.174404][T14654] __nla_validate_parse: 7 callbacks suppressed [ 1162.174415][T14654] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1162.221379][T14655] tc_dump_action: action bad kind [ 1162.223327][T14656] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1162.236882][T14657] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x2, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:40 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000048000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xf0ffff, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:40 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in={0x2, 0x0, @empty}, &(0x7f0000000000)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r4, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 1162.481729][T14672] tc_dump_action: action bad kind [ 1162.503538][T14675] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1162.529568][T14678] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x1000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:40 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000004c000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0xf}, 0x1}, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x2f}, 0x8, [0xa0aa, 0x20, 0x80, 0x3, 0x6, 0xfffffffa, 0x5, 0x25]}, 0x5c) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1162.569153][T14682] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1162.577439][T14677] FAT-fs (loop3): bogus number of reserved sectors [ 1162.577447][T14676] FAT-fs (loop1): bogus logical sector size 549 [ 1162.577462][T14676] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1162.608394][T14677] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1162.738426][T14690] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1162.782645][T14677] FAT-fs (loop3): bogus number of reserved sectors [ 1162.805619][T14677] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1162.813822][T14697] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x4798, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0x2188, 0x1, [@m_mpls={0xa8, 0x9, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x892f}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1098a}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_LABEL={0x8, 0x5, 0x45be8}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf2c80}]}, {0x32, 0x6, "f5801964fff9682fd4f08960c751f1e19f935874f2b7c4b817a408899cb3eeac9dcf46fa819a482dee14b45d7606"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1d70, 0x17, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x6, 0x8000, 0x3, 0x1, 0x8}, 0xfb, 0x2, [{0xffffff47, 0x7fff, 0x3, 0xff, 0x400, 0x1}]}, [{0x40, 0x4, 0x3, 0x8, 0xb212af6a, 0x6}, {0xd8, 0x100, 0x200, 0x4, 0x8, 0x8}, {0x100, 0x2, 0x0, 0x2, 0xfffffff9, 0xff}, {0x3ff, 0x1a, 0x2, 0xb032, 0xa0b, 0x80000000}, {0x0, 0x6, 0x5, 0x9, 0x10001, 0x10001}, {0x7, 0xfffffffe, 0x6, 0x609e, 0x8001, 0x8}, {0x2, 0x81, 0x5, 0x3, 0x42, 0x9}, {0x8, 0x6, 0xfffffff9, 0x3, 0x0, 0x20}, {0x800, 0x5, 0x400, 0x9, 0x0, 0x8}, {0x4, 0x1000, 0x4, 0x7f, 0x6, 0x20}, {0x3, 0x3, 0x1, 0x4, 0x20, 0x7}, {0x7fffffff, 0x8, 0x80, 0x9, 0x5, 0x2}, {0x2, 0xdc, 0x853, 0xcb12, 0xffff0001, 0x81}, {0x0, 0x7899819c, 0xc5, 0x7ff, 0x5, 0x3400000}, {0x9, 0xc2, 0x7fffffff, 0xf17, 0x5, 0x8}, {0x8, 0x8, 0x1, 0xfffffffc, 0x3}, {0x9, 0x1, 0x9e, 0x0, 0x5, 0x3f}, {0x0, 0xfffffff7, 0x401, 0x1, 0x8000, 0xfffffff8}, {0x20, 0x1ff, 0x7, 0x8001, 0x7, 0xfffffff8}, {0x5, 0x8, 0x3, 0x3, 0x80000000, 0x85a}, {0x4, 0x1, 0x5, 0x8, 0x5, 0x7}, {0x6, 0x2, 0x2, 0x9, 0x555, 0x10001}, {0x5, 0x0, 0x8000000, 0xd1d, 0x7ff, 0x5}, {0x3, 0x0, 0x1ff, 0x401, 0xfffffffb, 0x40}, {0x3, 0x9, 0x9, 0x6, 0x7ff, 0xf483}, {0x82e, 0x381, 0x5, 0x40, 0xb1b, 0x4}, {0x6, 0x2, 0x6b01, 0x4, 0x4, 0x81}, {0x5000, 0x0, 0x6, 0x7, 0x1d80, 0xbb90}, {0x2, 0x7, 0x6, 0x9, 0x1f, 0x3}, {0x0, 0x7, 0xa67c, 0x1000, 0x2, 0x5}, {0x2, 0x3, 0x0, 0x2, 0x0, 0x9}, {0x9, 0x8, 0x4, 0x8, 0x7fff, 0x8}, {0x2, 0x9, 0x7, 0x44, 0xffffff80, 0x80000001}, {0x1, 0x1000, 0x677e, 0x5, 0x2, 0xffff}, {0x4, 0x1, 0x9, 0x8, 0xffff8000, 0x2}, {0x401, 0x9, 0x5, 0x1, 0x0, 0xb95}, {0x100, 0x2, 0x5b8, 0x800, 0x7, 0x8}, {0x101, 0x81, 0x6, 0x9, 0x3f, 0x80}, {0x3, 0x3b7, 0x7fff, 0x800, 0x4, 0x800}, {0xffffffff, 0x8, 0x80, 0x2, 0x81bf, 0xdf2}, {0x200, 0x0, 0x4, 0x40, 0x4, 0x3}, {0x0, 0x6, 0xffff, 0x10001, 0x2, 0x9}, {0x8, 0x1f, 0x4, 0x401, 0x2, 0x80}, {0x2, 0xe531, 0x3, 0x4, 0x83, 0xffffffff}, {0x6, 0x0, 0x9, 0x6, 0xec40, 0x8001}, {0x0, 0x5, 0x9, 0x6abe, 0x1, 0xab5}, {0x5, 0x7, 0x4, 0x7ff, 0x6, 0x1ff}, {0x8000, 0x0, 0x4, 0x6, 0x8, 0x8}, {0x1, 0x4, 0x401, 0x7fff, 0xff1e, 0x5}, {0x3, 0x7, 0x62, 0x6, 0x100, 0x5}, {0x6, 0x0, 0xffffffff, 0x0, 0x6, 0x3}, {0x80, 0x81, 0x6, 0x7fffffff, 0x20, 0x800}, {0x6, 0x10001, 0x1, 0x5, 0x40, 0x4}, {0x8, 0x1, 0xc3c5, 0x13, 0x1000, 0x8}, {0x1ff, 0x81, 0x7e, 0x100, 0x9, 0x400}, {0x80000000, 0xff, 0xffffffff, 0xfffffffb, 0x2a, 0x101}, {0x80000000, 0x6, 0x8, 0x362, 0xfffffffc, 0xffffffff}, {0x1398, 0x8, 0xd2, 0x72a10801, 0x6, 0x40}, {0xfffffe01, 0x616f, 0x9fb, 0x736, 0x6, 0x10000}, {0x2, 0x0, 0x80, 0x9, 0x664, 0x3}, {0xb25, 0x7, 0x1, 0x800, 0xb21, 0x9}, {0xbd8a, 0x3f, 0x8, 0x0, 0xffff8000, 0x4}, {0x8, 0x1000, 0xeb48, 0x77b2, 0x8, 0xfff}, {0x7f, 0xfff, 0x6, 0x7, 0x4, 0x9}, {0x1, 0x2, 0x1, 0x100, 0xfff, 0x81}, {0x7fffffff, 0x8, 0x3, 0xba5, 0x3f, 0x10001}, {0x9, 0x10000, 0x5, 0x1, 0x2, 0x10001}, {0x621a, 0xfffffffb, 0x8, 0x2, 0x10001, 0xdb}, {0x3, 0x800000, 0x9b74, 0x214, 0x56, 0x165}, {0x20, 0x1, 0xde38, 0x37d, 0x2, 0x9}, {0x6, 0x10001, 0x7fffffff, 0xd2, 0x1}, {0x7ff, 0x401, 0x400, 0x2, 0x0, 0x9}, {0xfffffffa, 0x8, 0x4, 0x1, 0x4, 0x5}, {0x1, 0x80000000, 0x7ff, 0x10000, 0x3ff, 0x1}, {0x6bed728e, 0x5, 0x9, 0x7, 0x3, 0x7}, {0x834, 0x6, 0x1, 0xfffffffb, 0x80000000}, {0x5, 0x7, 0x1, 0x3, 0x6, 0x47}, {0xfffffff8, 0x0, 0x9, 0x6, 0xbc2, 0x7}, {0x4, 0x33, 0x7, 0x5, 0x80000000, 0xc486}, {0x705f, 0x6, 0x400, 0xea, 0x6, 0x1}, {0xffffffff, 0x200, 0x6, 0x7ff, 0x723, 0x4}, {0x9, 0x4, 0xffff529d, 0x4, 0x1, 0xff}, {0x3, 0xfff, 0x20, 0x9, 0xfffffffa, 0x2}, {0xe33d, 0x1, 0x8001, 0xfca, 0x3, 0x80}, {0xd140, 0x9, 0x0, 0x8, 0x7, 0x1000}, {0x2, 0x6, 0x0, 0x5, 0xb4, 0x40}, {0x9, 0x12ba4c3, 0x8001, 0x1000, 0x40, 0xf3ad}, {0x800000, 0x3, 0x0, 0x5, 0x2, 0x7ff}, {0xaaa, 0x3ff, 0x5, 0x7, 0x6, 0x10000}, {0x20, 0x9, 0xaa0, 0xff, 0x7, 0x8001}, {0x9, 0x9e1, 0x0, 0xffffff81, 0x3321, 0xc5dc}, {0x10001, 0x0, 0x20, 0x3e73fe41, 0x0, 0x9}, {0x9, 0x8000, 0x212d2a29, 0x6, 0x4, 0x8001}, {0x101, 0x6, 0x9, 0x705b, 0x1, 0xa4d3}, {0x0, 0x1, 0x7, 0x7, 0x1000, 0x1}, {0x8fe, 0x8000, 0x7, 0xf598, 0x5, 0x7}, {0x1, 0xf458, 0xdf, 0xffff, 0x7, 0x55}, {0xc0, 0x8, 0x7, 0x80, 0x8001, 0xfffffff9}, {0x9, 0x8, 0x2, 0x100, 0xec6, 0x3}, {0x4, 0x9, 0x334, 0x6, 0x0, 0x8}, {0x6, 0x7, 0x1ff, 0x7, 0x4, 0x4}, {0xffc, 0x10000, 0x9, 0xdc, 0xffffffff, 0xfffffffb}, {0x7, 0x6, 0x7f, 0x0, 0x7d, 0x800}, {0x77, 0x9, 0xfffffffe, 0x5, 0x0, 0x7}, {0xffffff2b, 0x2, 0x2, 0x5, 0x2, 0x8}, {0x400, 0x8000, 0x3, 0x9, 0xfffffff9, 0x5}, {0x2, 0x319, 0xfffffd0b, 0x9, 0xffff0007, 0x2}, {0x2, 0x7, 0xb9c4, 0x8, 0x80000001, 0xffffffff}, {0x7f, 0x8, 0x5d4, 0x6, 0x259c26b6, 0x7}, {0x1, 0x3f, 0x8, 0x4, 0x2, 0x5}, {0x6, 0x5, 0xd4f7, 0x0, 0x8, 0x3}, {0x7, 0x1, 0x9, 0x7, 0x3, 0xfff}, {0x8, 0x80000, 0x3, 0xffffbb12, 0xffff, 0x8}, {0x9, 0x2, 0x0, 0x0, 0x3f, 0x8001}, {0x3, 0x0, 0x20, 0x0, 0x8000, 0x80}, {0xffffff00, 0x7, 0x2, 0x401, 0xffffffb8, 0x8001}, {0x8, 0x8, 0x10000, 0x7fff, 0x0, 0x1}, {0x80, 0x2, 0x7, 0x6, 0x9, 0xfffffe01}, {0x0, 0x0, 0x7, 0x1f, 0x4, 0x9}, {0x5, 0x1ff, 0x8, 0x8, 0x4, 0x6}, {0x1, 0x7, 0x1f, 0x401, 0x1, 0x20}, {0x4, 0x400, 0x1ff, 0x9, 0x2704, 0x3}, {0x8, 0xf1, 0x0, 0x7fffffff, 0x3, 0x46b3}, {0x4, 0x8c, 0x10001, 0x9, 0x4, 0x31}, {0x4, 0xfffff800, 0x3fae, 0x4, 0x5, 0x2}, {0x3, 0x4, 0x3, 0x8, 0x9, 0x401}, {0x8, 0x101, 0x8, 0x45aeb64d, 0x8, 0xb1b}, {0xfffff800, 0x3, 0x9, 0x6, 0x7, 0x80000001}], [{0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x0, 0x1}, {0x4df14a6ad087aff6}, {}, {0x0, 0x1}, {0x3}, {0x5}, {}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2dd0676f7b434344, 0x1}, {0x4}, {0x3}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x49881f2efe2700e8}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0xa42febd3d8ef0e15}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0xd725bc4f5c60f6af}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x6, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x7fffffff, 0x9, 0x3, 0x0, 0x8000}, 0x1, 0xfa, [{0x7, 0xff, 0x1ff, 0x0, 0x7, 0xae}, {0x100, 0x20, 0xfff, 0x3, 0x4, 0x40}, {0x8, 0x0, 0x4, 0x4, 0x1000, 0x80000000}, {0x200, 0x3, 0xfffffff7, 0x9, 0xe1, 0x6}, {0x0, 0x0, 0x2, 0x101, 0x7, 0xffffff00}, {0x442b, 0x80, 0x8704, 0x7fffffff, 0x7, 0x5}, {0x5fe0, 0x5, 0x5, 0x28d2f93f, 0x10000, 0x401}, {0x1f, 0x9, 0x7, 0xf9, 0xffff, 0x6}]}, [{0x3, 0x6, 0x5, 0x4, 0x8, 0x4}, {0x0, 0x9, 0x81, 0x1f, 0x9, 0x36361484}, {0xdec, 0x3, 0x2, 0xad2, 0x6, 0x8}, {0x3, 0x200, 0x3, 0x9, 0x646, 0x7fff}, {0xffff, 0x1, 0x9, 0x6, 0x9, 0x8}, {0x9, 0x4fb5, 0x7a, 0x1, 0x1, 0x9}, {0x3cb7, 0x8000, 0x6, 0x9, 0x3ff, 0x1}, {0x0, 0x80000000, 0x8001, 0x17, 0xfff, 0x5}, {0x80, 0x3, 0x80000001, 0xcf, 0x80000001}, {0x80, 0x1000, 0x0, 0x6, 0xfffff001, 0x6}, {0xffffffff, 0x1, 0x20, 0x1ff, 0x4, 0x8000}, {0x3, 0x414, 0x1, 0x5, 0x0, 0x7}, {0x1, 0x1ff, 0x6, 0x7, 0x5a, 0x10001}, {0x20, 0x1f, 0x3, 0x9, 0x2, 0x3ff}, {0x1, 0x0, 0x5, 0xffff, 0x73a, 0x400}, {0x8, 0x2, 0x6, 0xbe, 0xfa16, 0x8458}, {0xd918, 0x0, 0x10001, 0xffffb16d, 0x3}, {0x0, 0x97, 0xce78, 0x2, 0x4, 0x164cf14b}, {0x3, 0x0, 0x3, 0x0, 0x6, 0xc2}, {0x1000, 0x7f, 0x10001, 0x4, 0x6, 0x1000}, {0x3, 0x8000, 0xb3, 0x0, 0xed00, 0x5}, {0x10000, 0x46, 0x58e, 0x0, 0x3f, 0xf0e}, {0x0, 0xb, 0x2, 0x27, 0x68, 0x5}, {0xffffffff, 0x8, 0x2, 0x4, 0x1, 0x9}, {0x4, 0x80000000, 0x4, 0x6, 0x7, 0x4}, {0x3, 0x1, 0x2, 0x3, 0x1, 0x400}, {0x1ff, 0x2, 0x7, 0x9, 0xff, 0x5}, {0x8, 0x2, 0x3f, 0x7fffffff, 0x101, 0x4}, {0x8001, 0x2000000, 0x4, 0x80000000, 0xfffffffd, 0x1}, {0xa5b, 0x4, 0x6, 0x6, 0xcdaf, 0x46d2bcd2}, {0x5, 0x100, 0xea, 0x3, 0xffffffff, 0x400}, {0x1, 0x8, 0x2, 0x20, 0x7, 0x8}, {0x8f31, 0x10, 0x4, 0xe8, 0x5, 0x10000}, {0x2, 0xfffffff9, 0x2, 0xffffffff, 0x101, 0x20000000}, {0x3, 0x80000000, 0x7, 0x401, 0x80000000, 0x6}, {0x101, 0x28, 0x2, 0x3, 0x400, 0x6}, {0x3ff, 0x3, 0x6, 0x12, 0x0, 0x6}, {0x0, 0x1000, 0x400, 0x7, 0x1f, 0xfe3}, {0x8, 0x1ff, 0x1, 0x6, 0x7fff, 0x1}, {0x7f, 0x3, 0x10000, 0x80, 0x2, 0x4}, {0x69f, 0x10000, 0x3, 0x4, 0x6899, 0x6}, {0x5, 0x0, 0x3, 0x6b, 0x6, 0x3}, {0x743f, 0x24681fe5, 0x0, 0x2, 0x7, 0x4}, {0x8, 0x4, 0x81, 0x2, 0x4, 0x6}, {0x80000, 0x7, 0x1, 0x7, 0x6, 0x784b3240}, {0x10000, 0x5, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x1, 0x0, 0x1f, 0xfffffffb, 0x1f}, {0x3, 0x8001, 0x0, 0x5, 0x5, 0x9}, {0xb64, 0x6, 0x9, 0x3, 0xac01, 0x9}, {0x8000, 0x101, 0x2, 0x400, 0x2, 0x400}, {0x1f, 0x3, 0x3, 0x6, 0x1000, 0x9}, {0x4, 0x1f, 0x52c, 0xfffffff7, 0x9, 0x10001}, {0x20, 0x0, 0x7, 0xfffffffe, 0xd3, 0x7f}, {0x7, 0x3, 0x7f, 0x0, 0x81, 0x7}, {0x7, 0x1f7, 0x3, 0x1ff, 0xfffffffc}, {0x8a48, 0x9, 0x837e, 0x2, 0xfffffff7, 0x5}, {0x2b7, 0xffffffff, 0xce, 0x2, 0x80000001, 0x2745ad35}, {0xf1, 0x1000, 0x1b3399f3, 0x6, 0x1}, {0x0, 0x100, 0x4, 0x4, 0x1000, 0x3}, {0x401, 0x84, 0x100, 0x80000000, 0x6, 0x1}, {0x4, 0x3, 0x9, 0x8002, 0x6, 0xff}, {0x200, 0x100, 0x4, 0x400, 0x8000, 0x3}, {0x3, 0x1000, 0x7, 0x7e0a4415, 0x101, 0xfffffe00}, {0x2, 0x4, 0x5, 0x1, 0x0, 0xffff}, {0x35, 0x7f, 0x6, 0x9, 0x6, 0x5}, {0x9fe3, 0xfffffffd, 0x119, 0x4, 0x55db, 0xffff0001}, {0x100, 0x9, 0x2, 0x9, 0x41bf, 0x8000}, {0x7, 0x69ebad0c, 0x54, 0x400, 0x7, 0x80000000}, {0x2, 0x4, 0x6, 0x6, 0x6, 0x8}, {0x3ff, 0x101, 0x400, 0x3f, 0x1ff, 0x5}, {0x3, 0x31, 0x8, 0x3, 0x1, 0x4a6}, {0x1, 0x6, 0x4, 0x0, 0x8}, {0x1, 0x0, 0x9, 0x5, 0x67, 0x3f}, {0x4, 0x64, 0xb62, 0xffff8000, 0xfffffffc}, {0x4, 0x9, 0x6, 0x80000001, 0x0, 0x81}, {0x1, 0x7, 0x0, 0xff, 0xb8d5, 0x3}, {0xe08, 0x0, 0x0, 0x7, 0x7ff, 0x7}, {0x80000000, 0x3, 0x3, 0x3ff, 0x1}, {0x20, 0x1c, 0x1, 0x3, 0x4, 0x2}, {0x8, 0x7, 0x80000001, 0xffffffff, 0x7, 0x1f}, {0x101, 0x1, 0x20, 0x2, 0x8d6d, 0x1}, {0x7fffffff, 0x5, 0x3, 0x1, 0xfff, 0xfff}, {0x9, 0x8, 0x0, 0x7, 0x8, 0x7}, {0x5, 0x0, 0x3, 0x6, 0x3641, 0x9}, {0xea2, 0x0, 0x10000, 0x5, 0x2, 0x81}, {0x6, 0x0, 0x5, 0x81, 0xfffffffb, 0x3}, {0x7ff, 0x0, 0x1, 0xfffff951, 0x9, 0x8}, {0x0, 0x5, 0x8, 0x6, 0x7f, 0x8}, {0x95ed, 0x9, 0x4, 0x80000000, 0x7, 0xffffffff}, {0x3f, 0x1000, 0x1, 0x8, 0x7, 0x7}, {0x3, 0xc2d4, 0xffff59c1, 0x9, 0x4, 0x40}, {0x266, 0x401, 0x8, 0x5, 0xb709564, 0xb9}, {0x6a, 0x4, 0x2, 0x4, 0x7ff, 0x9}, {0xdaf, 0x3, 0xffffffff, 0x2, 0x9, 0x7}, {0x2, 0xffffffff, 0x7fffffff, 0x1f, 0x4, 0x3}, {0x5, 0xfff, 0x80000000, 0x1, 0xe1c4, 0xaf04}, {0x9, 0xc6c8, 0x7f, 0x401, 0x2, 0x6}, {0x7, 0x6b7, 0xb, 0x7, 0xff, 0x4}, {0x7, 0x5, 0x0, 0x3, 0x8, 0x6cc}, {0x8, 0x2, 0x7a5, 0x8, 0x4}, {0x42, 0x7, 0x3, 0x1, 0x2, 0x9}, {0x1, 0x2, 0x5, 0x3f, 0x1, 0xfff}, {0xe1a, 0x7, 0x2dc, 0x3, 0x2, 0x5a1}, {0x4, 0xfffffff7, 0x5, 0x8, 0x3, 0x4}, {0xffffffc7, 0x6d, 0x1ff, 0x7, 0xffffffff, 0x8a5}, {0x3, 0x7f, 0x7, 0x3ff, 0xa9d, 0x6}, {0x4, 0x1000, 0x5, 0x80000001, 0x200, 0x1}, {0x4, 0xfffff000, 0x0, 0xffff0000, 0x6e11, 0x54}, {0x10000, 0xc22e, 0x5, 0x5, 0x4}, {0x4, 0x55, 0xffffffff, 0x66, 0x92e, 0x3f}, {0xc300, 0x1, 0x82a, 0xff, 0x10000, 0x7}, {0x4, 0x8001, 0x5, 0x7, 0x6, 0x81}, {0x3ff, 0x3, 0x3f, 0x6, 0x4, 0x8}, {0x0, 0x8, 0xffff8001, 0x4, 0x2, 0x31}, {0x10000, 0x7c2, 0x8, 0x3, 0x1, 0x4}, {0x4, 0x10001, 0x4, 0x1f, 0x5, 0x6b39a3a2}, {0x1000, 0x8, 0x24aa, 0x5, 0xfffffffe, 0x4}, {0x5, 0x7, 0x6, 0x10001, 0x6, 0xfffffff7}, {0x8, 0x4, 0x9, 0x9, 0x4, 0x1}, {0x5, 0x96, 0x3, 0x43, 0x0, 0x6}, {0x1, 0x80000001, 0x7fffffff, 0x1d9, 0x9a5, 0xffff8001}, {0x0, 0x69, 0x100, 0x3, 0x4, 0x4}, {0x4, 0x1, 0x360000, 0x7, 0x7, 0x10}, {0x8, 0x993, 0x9a77, 0x80000000, 0x8, 0x80010}, {0x97, 0x9, 0x9, 0x1, 0x7, 0x9}, {0xfffffffd, 0x80, 0x0, 0x10000, 0xfce7, 0xf6f8}, {0x3, 0x6, 0x1787, 0x5, 0x8, 0x9}, {0x6, 0x1, 0x9, 0x1000, 0xfff, 0x7}], [{0x1, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x3}, {}, {0x5}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {}, {0x0, 0x852e5b0bf8d10973}, {0x7}, {0x5}, {0x2, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {}, {0x3}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0xf657facae6386942}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0xfd9186d29e5c671d, 0x1}]}}]}, {0x29, 0x6, "4ea248bf52abab3f2398d08f0ae266eed90fa026a25349b209c916ffd16c7766df631bb0ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x94, 0x0, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x0, 0x3f, 0x7}}]}, {0x2f, 0x6, "a8ab92efa774235ea1227e4159f9226906cbb8afedb10f3acf56461f5c48ea67ccb549cf1d4b8b75dc13e3"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x270, 0xf, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x45, 0x6, {0x2, 'security\x00', 0x1f, 0xfffd, "8457a1984fdda65a392b55b26b828987bbf22ec1e50c5b163477df"}}, @TCA_IPT_TARG={0x67, 0x6, {0x7, 'raw\x00', 0x6, 0x73a3, "effbfd026cc7c87d36912302f06434ec52b47ddd915ee17c4081baecea4bc05c75e03e9615085a38a2a9e3f7c46315ccb82f63a1bb64d38d5c96ccaf98"}}, @TCA_IPT_TARG={0x67, 0x6, {0xfe01, 'filter\x00', 0x20, 0x100, "72013ec4fdb6c726f37836793457a5d6f1507550b39a84cd1ee1820a254e8f724f5d72375e8bf1c1db689edc563d96e6e0eabe27d551f6388d1f4dbd09"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x6a, 0x6, {0x8, 'mangle\x00', 0x1f, 0xafe2, "67ec91f5eb18a935b236f1267abaa66dbb8c313167045aa2492070a8138b4bd59424ca52d5adfb20b899d8ebbfa35b4bc2809aa594576cf828d0de615ae52a5c"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xab, 0x6, "ee73c964a4aedc8628eb5cef58ba4c5143a5b2e3761c3b5ab28aaa1b4483e03a8c947fae208c7eb9add8ea438510d2d0d3033b6f0b7915aa857bd25ec90d328ffbb26d114e44a388c21a35500d41ef25c4a4b5458adc203ff6f8d6d1c2b8b655728e17077b9fb4deb2d29154ddcf22ba9390f8db007b683dda55f7504f26bc935998f1f5bb7f190d52894a071af75c6a6329f63f43c90aced09baf0b372a4e39dfa0ae23b0d609"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x68, 0x14, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x1}}]}, {0x19, 0x6, "d0715517b65061c15bb0323d8f2a3556e769ca5d3e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x13e8, 0x1, [@m_ipt={0x220, 0x7, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xdb, 0x6, {0x6, 'nat\x00', 0x9, 0xe0d, "f66ac2686e7f217339588caea30216ce04f74611b4bc38eb743b38d59385cf6049273fa237cd1167b28d1cfebe535080a81e2213baf6e8d69e3a7b1af8207f44338f830f67530b439cedd034e1155fd319e49ce42dae7cb125c675f82157d171181e844b8ad00a22b4063d76d6aa8d8e5d2ec79f2057580655370917f2c9e97588cb779cbe7c0e242a044021348fe47f3c66e9faabc920fe24363e21aa73f5dd50bf1c728a73ff5108bbf5579eec7565d5"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xee, 0x6, "0b331c33eb0b605901ae8605ee8d9f85162e8374b4f3c03538d5e01d26bf8a60f90b827cf13073dcabde6c84abaf14e6f408ef743d405b6d46649d4717ecd7d955ad2fa882c06175f80c946d86fdc32009cb8e7ddb6ce92f96967d2583c5ca6295222efa4c0aa567890bcf54a0554dbc48e3c67c9b4f8dba05be92f762c59b7d111e26ac7c6a40bdc53589be6ca44e5e4be2145ea6868a53a376db948451c2e0800d06039698b3b4e8c94d189aed8965260272032df90a2f437f8318ade1ac73e1a30d702f668156f2dfb5cb94816a8e18be2f622f8e5b143093a3ed3cf39f6b9e72236abc1124fda991"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x154, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x40, 0x4, 0x1000, 0x10000}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x20, 0x5, 0x10001}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0xffffffff, 0x3, 0x80, 0x7}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0x5, 0x3ff}, 0x1, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x57b, 0x4, 0x6, 0x9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0x1, 0x9, 0xfff}, 0x2}}]}, {0x68, 0x6, "8291ccea40848e33f41987ca6779f55ceb8f5f12bbfb58fcaab9d41059cdd32e32940c7a1a52b8a18be6ba610b0f947db50617155c7002ac691392daba11fd9f955f09c23ef46993a6f144a9a5e3140c1bef617ed95febbc83fe84b7ba17fddc9e68303d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x1070, 0x1e, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x400}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2d06}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffff91, 0xfffffffd, 0x4, 0x10000, 0xfffffffd}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1e51}]}, {0x1004, 0x6, "a28d9057bd5c7923707fbeac380a7ec3aaa48241a8a04b95776b67e74129117a235d0aeaae92825687de25ed808c8c75d00145b62952b96be6a51e5fbcc46a354eed3a00329037e08e66948086ea381190995028e86a2001d7bf54db86125095569e502236aea32b7df38553b508761f8f1ce982c6d183ccd8bd3acd1ef6d4467353cdf123a89d023b7350a9ea44a0668c0576967a017170627d9a00484de6524099296af7deb7a629cba5aabab4c55dbc83ef1905ee2830ef413068aade13cc3bbbd63228b6a100afdc8937c7ad78156be42900eb6d3e06c28c7c48faafef03f682cbb10b623607c3e4e6ce3a24f82f2fa039d14978c87c1bf8e3cb89769b07d7b3cf16ef84615642401905907ae6ab8d678046b7bd4642bff690dadb1f8eb175e93f52aa85417759b4ee50ea990dc129d66ba3f1af5b7d3e71d24556189fd7373d720a185fdf702c718f3d121bd57601d44c9d75514aa0292383eb1647472876a6458cdbda0c5b2b8dd98af54697eb49195daea6a54c0490ff84513ef58c05528436714c2e4b7829c44d99dfdaf12d421e0ca2027d7570316d075c240497590717ec30f7861105ee1884b216a4bde8feaaacbc45b2f0b445be2aaf6cf8a82ff1637433c3abd13c3c0a3192e6843dff88bfb95ae9e2ce9edc4e45ba751ecca0b976f43328e3fe5e8a321ac10671d1ebdb17c0f2138a19e223da8d9f503f636a5a674e3770ad939b586e3ab32468f68d973926172f82a51eb56e40ccfacbd6b3ddb197e0dfe8ab68abb82d016754825728ce6011125d636a38dbd788c3c3d2a98e75d5de52d8c6b277ad14bbb9bee3a28004bfd2e4dc34d51d2394fd34d5ce7703912b09f9ee74bb1fe8d0bcf5950bf2cdf9e7ee2c266f84c693741bb306c0ba4854040b4129fcd3e2b5ed05deca6a5c06973b5fc4069a311e47240a5e49103f1a7c1e3f323a5e04d7c5ed8d465c1627f25840d49b1888e8c542f30ac4673a13874ecce26ae8de6da7ca12e0b8e217384cdae53b044677aafa77d84f88bbcab15256b1dd0286e509122cf72ffe158459a62f0c6f349a5461dc2533630eedc312840482b8d0ca3043aec9854753159c20ed4980532698dd83dc88d6e592383431486d6b4eced18254fb3ea6077a73e1429707b2834e1eee6df4270028b1565778daf3806b744964274e1eaa11acbbf30249c8461f561a54e2aa5b789d3154c5ba55501aae5745337715372824771a815bdf84d8e2c7403033b1afc2abdb844681db0c4b92736d9dc938b5e35fb4c0c7ea90b4f7f6ba9ca63a45b5fb431e7da1a29a78a254bea476c6a2ad85362533c01113671994907dda87285ab004d58e858dce38e41baea773b3769ecde8505c52832de4fc7388b7ec6e6d2b1c50d544e76abc824c326a4fbea06e4810b72a79e80ccf5ff8b35a78f6167719891c34956f8c70926004f5469f427960d74a07ccd6c1bc31c1c76bc07f7601d978f140fc458d83627d44fef7d51a8d0d1bbd69d037bdf002c854319d6f5ea341f81b2646139ab88c3adb664d7d79a00fe90799834133909be694f68d2b8802dbbefa5110264d699800b6cceab5ac50e40f9d0527e15df47b684a30fc63e8e5550322ef4ecd5e0c7764b7ca72a9dcebdfb129005edc6e503c1e5defd7d7d6a50f3da722876a565f669249ce814e1ee75970b401012022a6594a8630f37994e936abb90cf3abc4a33f7113820438f96ff816a699e1805386b62611421e2c3a46ebba80ef11169bd731ef3d9d848bcf245a30fa1a40a1ed01f7e210380481dde892526e013ab90388ee9f2bedb97dcedb65a7cf784bbd61e4b167fc1c7e2e64856c6a9cb141e05d0f89142bb0492e264114b930d458359168699d828a75a1d091655da37933818a14a1dfcbdb17a7828b9a70f730aaa0bacac5fb6f75baae599ed472f8f45c95c6381253b75e27d0da5187231210ed311397eaeb264faa6d923527caa1d53a592acb5fca371bb3515f278c5d7d95d0906565bffab3d6b9e09d03ec07628057d7b762d1a892a654fe26f54f21ea631589b41fa585e9642364f87a60f6a209c7bc7573c108a2cb646a8ecb125a23d38d4f8a487b223854b338eaa932a4f22bdf625c60d1489a7fe0e764ef2a4a6f41b7fba74fcf27aada44bed0851f9e4e78bce23c66a34ba1b4afcb248b6dc978a2c24bcd6ba2822fa8c740a5288c697d5efed88b9ac9cc16a49031a4035255bbf803c50e410cfd9de39db89b525e648e75bbc2f114b59b08d249161019a21d871c624051ea0c543a44d22d1f9b14b7a58da037104c2bcaf1b515fd27b9751e7ac4cb1e52f8f9dabe78dd9dd2b3ca78630f567bb475142eea1d25c5faa050e434720cf84a2c93b4fcd48b11f4a020a784c4a96a49f19f9a6000533281adedf3a1e6c28a675249659e20d2dd0002b34a72fb8963f34c1f5c52d319cfb4dd89fdfccaeb24b0f1db0c389e2f4c50e4cf344a71a1ec5b01ad33edaafd8f23c95a5ca450074eb2987e2f377157b68d732cd26df6ac0e5a0de218f62b2962a629f5d4a05098df8996b12a7c942d43b55b3626d66c4d87ee0cdcb60434e1c1b09d3f33035ede515e42c0da0e34d0ca788fbed344cd0f9f9d4031499a216e6ddcf683587fcf17a9c4e8f6c5d40c5326ffa36c101fc2d666c83f893842f3c1a0098443e42ff04a011cc1b327e66fe47a82942412cfbca5282edc0d248a08a604dfe66cfb4cbb44e7e41e1397b960bff65660fef35d68f3970cec0c5f90137b0d9d8f1117d82e6463340fed0e101baeadd1551fe5e8fe7b89c27aa600c4c5f0ad2f8725c65b5f2c9dfbde3845acfc40ac05dba82bd2362315ef10bc1227ecf08e73dc424cca1a0107511bfc6009a68b9b930fd0bdddfb27beb1834111d68c707dabdc9517368380602d0093cb7c199022dc072098dd670c0e524b9e53f5e0ffbc0ec7b659fa64bbd7d0692f140ab76ccb6ae341315ee3c13bb12f8a5a5aee1c34b9a3da2d15fcc9b6ef6c68db24dfe03ff2fc94d2d13cb254106734977984d878b26c6de4b3e20da3d16bc1b8e1093466c996eec0422ec9d69ce58ec9cb77a0887dd5e9df0bd382b46a3ad9aa0827c042573d4bfb70087e36fb99b91b690276cf0ff97e8610c0a84481194047a362419aa9b146b7a4786575b05fd9dec42518d56746739aaab31cce81bb546479a263c360f90089d6b1dbe112100d2262d1c23b4d55c0dd9ddf2e6e4283c4b8e7b3fee52f9484c61173844bf9f1b55c605dd90c48800371a49f868f10fae9df31a96970805f270713c0e674ad4c5ce59f96e9440066051c62c98bbcff2e57d7f2252c50a0ddfb00cb9c5017d97d9d1cbf07479094c53fe682663174d4305fc2ccb1a5a9a8e6764724c10a23c4d1855e074d418769e8d134226a1c3beac191b02ca7c88dd3e89343510069fcafad21c6edc2cae50408c9f21f207f27185cc09cfe9c4119183ca82ead1a721ff49c8474cc77949c38da96cbca88b2421ff15e8e28bd2976737b099e48e62671830a51833b64024b1fec9576a8ef7a81376387c04da89f9b698b5943564fdc4aaa8ee0de6d1fa643aaccf44d451a99bfff26a7c68222c7189b4b491e4691763b5a4ee254cc63c19b7540ab5cf576d7b95ae600c5780f0aaa616865eb6f1f284909b7fbada5225699f8a6258367405ee152e59109e2df43ee20a891d85386de7bccbb417fc3e2b3a02de22ac61acda3a232d5dea7c24aa2daa065821de1aa24e3f71541354e3c2e50863dfeadcaa4223724579d0278976f1e8f8980ae9c2e786e87891487902b63d75489428ea70dd83966dfc22b7e5a8e35c8463a27d5e15c3157a2b71a8b1bd0fbbdf269bd2a76d0628c5c78a853adb68799cdad67087cdcc2aa5389d8130035dbe3e060bd805589f7dc45c3328c6fcacbe10eadd7a471c51667c52d5237ee301d70536b6416d80346848339e9062d62fe80f6c86555c3509459b94110c9f9f1d71219d159deeed6f7549b9685b70efd6a4cbbf750d55bec871833c5c4eb90e571f1d4020f9e8ceeaa055d1b744f09e5b692f82ffb34422170f16008f4daa41a9044e1862fb782f420fe91742832c1c8e334b1a93c3a9e189d93e8323e049c56ea5ba3d727bc683935dde0f473deb8adafb0ae45116eb018cf83813d3c9962dc708494a6e27728eb779dde6106acbd7b03b44f890e2af824b1b703fb8133c5ea23fa082cbc8d06553061b66584cc30c579e233398e7f349a953312bb7ff595351f6f6a02cfd124b8c7843c04b57fdb8d09c47624b1bdea5139a5fd0bb0f45755ced4aa00cdf82498de7328622cee790849591981187e89f8f7e308f806609bca9ad817c192ed08067086b8486acef36f65531bb8194005605a02a51ed1e9ba591d57e232a03f4fdc23eba0f3136c8a2b4ffd4a17585f7bd69839e63c8994f64c908387457516cd02219698268b16a2bdb6db8dffccc02ebd4e6fe0e6408bf35d3d23e00e9eb31158728393aeaa4e0f47b852c08f4746e5b242ecd98e9a953451a555d631ac51cc926bb5148a1f1cdd50fd19166cfa6956a3b833df5d25e9605ea8e6df15a4dbce9a578795aabeccd5a08b887d250e66b2ea4d45a3ebb3c0fb814bb7e0e10433a16cbeecd115331765b3c4a9ef199efe4a92405198c394e1e2b2e1930704ccbe9624b7186829890a838c1e150ed2d5af5556ef812a43ed47bf75c53bc2d6ab8e4feb84545bb14cb316226468857fc90fcacbb0c30f905b6a03cf5346b3d9386ecafc3c9fc5d7ab40b4863b2b05bad611056644e819f22b019da79ca268af2e3163c15b1c72cf43b6f6f4cd864bec9b3867625cdbd8a9f085087acfd0ade6debb962612ea05659d4f895eaaf81b30e3f99f9971a54958993b3380388d55d02ed3348fb8a0084edda47bebe49e85d265ef733c84cbbe0965c3366d94de9f45247d5d77a249a70790e7b143935a8f1c5043f36b2d3fb9d4ae5a23c0fb2f5fa4e277a0e8c82e3a16ca6c6eaa32f9fcf24fb54c70ef3f290daf96f4d6385850d291c6e9c1301eb29f70525ce667311d152fc4e348dbba14e95c4ef5a6872741cb60dc0485b8a6e6ae0f1e0c3957f9755156e028e41f970fdba7e1e93691ce6a5551edc8924fedc7c51037f70d93c96a659722c004a23aab76cc0396825ae52bd3b3fba9e3d96c4b45e1a40ae700b523812db7295ba564147830de8191cce448dedaa33fd7e814234277e3f56dcdeb88c627e31bf128b708d74f57a8a7b68c2bbb7033d6c38511995cc42367827d83a5ad2fa9aacdc89fdc91e2d3f00b6f6be3fae933f194d31df2491f0880ec4922de6b06523bace7832fe8938444ef6773682dd0619b65efc1ed6322bda1db13bbbea7ebc729e2d4a1bcd4abffbe13ff082aa8431b47b72604ca49298ce6f1ef4ec54a3be76aa1f50f7bd889d1b005cd4747c1f1fd5e3acf7065d2b632ee812e044c4f3112c651ca5b91996f0aa058f038da7984f74ce7d1f0ac43f20d95addf81e709539b8008e3e8b05ca6f3e9d9a09bce37232d46771d0a6334815090b49768b801820851996404b0388da119cf22c38ccf0f7da3aeaf0015602c4601e5f9526412eea56ff09bf8a47fad7bb248b480c4c035f1e05890ee8fb31803dde3d2bc4702cd759a1aac9e03c45d62ca0324e632d3de926b05e93a6f2048d9c7be92bb587f3350964e6facc6e2cf278250bcf608bc279d794d96ede9cd371de2eee883a44c276ffb0c0b3819869f553eda68688ced7a2056e283ddef997926eaa3b285da9097b758cc83e4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x11c4, 0x1, [@m_csum={0x10a0, 0x16, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7c7d, 0x9, 0x4, 0x7ff, 0x8}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x57ee, 0x10000000, 0x1, 0x6}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x23a9, 0x5, 0x1, 0x7ff}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2c, 0x8, 0xc95, 0x3}, 0x61}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x74, 0x5, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4}, {0x46, 0x6, "656a516e7d29fd2fefe98bfd3a113de570c30e848d95a12dc2199cb0b97f45dc47db8bead0d6447b648b25bde1ed08f52c516c4866e46719df1a3b846a5655b5010d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xac, 0xc, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x1, 0x6, 0x9}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x101, 0x0, 0x7, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x2a, 0x6, "4e72e2ce375ed36d16bb81fb2e8697a7cf1e6a396825dc2406dd6623df5d4f450ec670fd34de"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x4798}}, 0x0) 13:37:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000020000000006c68c3ee365665f87941318"], 0xea, 0x0, &(0x7f0000000040)="c6ede1d44ba10ed70b3965bfa151d36008592c5fbb6ba9f49d144282737befdca8d7981fb2b88c9ba81e82652aaf401ad328d05301ce5464b61dfcf783eb9a661ea780260a1fd676e0183d99a7a2a3f9a410eb6ab2050ad6c34e300eefdc932ad640a873a10b24cbdda3a1016bb8c2bfb0e9f805a9cbaa9f7fb68dfdec761279ca5c629a6fa638cb53fe15a30640f46749426694da55ab8432b091e6bf62e36ce512fc05af2f12c03b9c2012dcc8d38a1c28f5bc5424f53f88ed4dbdb68c71b2add0989ed0ff04b0f26e5ce511c1fc55e666afeae8e81533592aca96ef521a76975dd5dcef11f7a7e72e"}) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1162.838702][T14676] FAT-fs (loop1): bogus logical sector size 549 [ 1162.861070][T14676] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x3, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:40 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000060000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1162.986985][T14701] tc_dump_action: action bad kind [ 1162.999590][T14700] tc_dump_action: action bad kind 13:37:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffff5}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x2000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 13:37:41 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000068000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1163.091633][T14707] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1163.104363][T14711] tc_dump_action: action bad kind [ 1163.125645][T14713] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x3000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) [ 1163.255870][T14714] FAT-fs (loop1): bogus logical sector size 549 [ 1163.300733][T14714] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1163.335795][T14726] tc_dump_action: action bad kind [ 1163.370332][T14728] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1163.388012][T14730] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:41 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140001006d706c730002801c000200000000000000000000000000000000000000000000000000040006000c0007000534193101c289960c0008000000080000000000"], 0x64}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000002c0)={0x1, @win={{0x7, 0x80, 0x6, 0x10000}, 0x4, 0x0, &(0x7f0000000200)={{0x7, 0x800, 0x10001}, &(0x7f0000000080)={{0x37e2f0f7, 0x7fffffff, 0x3ff, 0x9}}}, 0x20, &(0x7f0000000240)="0080c70c15396ae306840534ea74809582fc99b357f8c7f83d71c90515db796d59e322613c524af5cede5767e239ec04656d3cefa729e8dde83d0a8a99ced4334e426a506a5862045fc393e699ea176c914787f01a425910f797af8219c4b0048218277e1d9251a36c2790f095ff388779c436bf66ebed", 0x81}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x7fff, 0x1b1940) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000440)=0x5) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000180)) 13:37:41 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000006c000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1163.420451][T14733] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1163.474363][T14714] FAT-fs (loop1): bogus logical sector size 549 [ 1163.480813][T14727] FAT-fs (loop3): bogus number of reserved sectors [ 1163.504756][T14714] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x4000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1163.523258][T14727] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x5000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1163.581089][T14739] tc_dump_action: action bad kind [ 1163.672756][T14743] tc_dump_action: action bad kind 13:37:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x4, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffff6}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1163.704860][T14745] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:41 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000074000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x6000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xfffffffffffffffa) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r7 = dup3(r4, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x10, &(0x7f0000000300)={r8, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x4}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0x2, 0x80000000}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000320061af00000000000000000000008af123b383a8de514e37c5b0f53d44fc00500001004c000100140001006d706c7300000000200002fdffffff00000000000000000000000000000000000000000000000000040006000c00070000000000561b1481866e2aab2ba8184db70adbfefe8921c8bf8b826178772b1b8441aceb31b25e3181530ab86f501ec9106ff8007a57b4674341e53ec1dca876d2ed4c9b2107a9ce90061a4383a305b61e0ab0f4779d8524826c7a5209223274abe0398f"], 0x64}}, 0x0) [ 1163.938562][T14756] tc_dump_action: action bad kind [ 1163.958653][T14760] FAT-fs (loop1): bogus logical sector size 549 [ 1163.969760][T14760] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1163.979551][T14758] FAT-fs (loop3): bogus number of reserved sectors 13:37:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x7000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1163.994703][T14759] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1164.022462][T14758] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1164.029264][T14759] tc_dump_action: action bad kind 13:37:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000007a000086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1164.039620][T14760] FAT-fs (loop1): bogus logical sector size 549 [ 1164.059582][T14760] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1164.086057][T14758] FAT-fs (loop3): bogus number of reserved sectors [ 1164.101757][T14767] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1164.108218][T14758] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1164.118542][T14767] tc_dump_action: action bad kind 13:37:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140001006d706c7300000000200002801c000200000000000000000000000000000000000000000000000000040006000c00050000000000000000000c00a1a58ad26e08000000000000000000"], 0x64}}, 0x0) 13:37:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1164.135357][T14772] tc_dump_action: action bad kind [ 1164.190211][T14777] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffffb}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x74, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mirred={0x5c, 0x9, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0xffffffffffffffff, 0x4, 0x1}, 0x2, r3}}]}, {0xd, 0x6, "b62af78a74ab881f42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) 13:37:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x8000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000030086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1164.288962][T14780] FAT-fs (loop1): bogus logical sector size 549 [ 1164.300858][T14780] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000050086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1164.371217][T14787] tc_dump_action: action bad kind [ 1164.380532][T14780] FAT-fs (loop1): bogus logical sector size 549 [ 1164.391775][T14791] tc_dump_action: action bad kind [ 1164.404618][T14780] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1164.414436][T14791] tc_dump_action: action bad kind 13:37:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x2, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x716f, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000180)="7456e65b33d0a4da2546a97c07efa8ab99801ac5727f4cd8f8b0da1b12ca349b8b8456d575a9fd97f3b781eb7b0a48fea96f52243a6a76b3b77f20e8e92c410f5a5b30da6f305312d626bd6b7b9286ca50b92595549234a28fa29ceeeffb684cd669386777db00c6483df6e5ba5f4d28e1e6058d23456b0b206dd8", 0x7b, 0x7ff}, {&(0x7f0000000200)="ad2b71e6704f072f601f8728483723879c59814097d6d66c011a87d756c77eee059376989700f300dcce6e09bace4319217ba9197eb556e12db0019b7f1f2a5f61c76a987129bfa2eef1d613482f5551b79d370b8088bcf6a60171fcc91c3fcf25d7766a22a78d048ff3344819c07f7351bc4203ec27ebe1527d6719795f7d2dbf6c0a52a27b3ca5484ef8d1173946fe2395c809010a7c", 0x97, 0x7}, {&(0x7f00000002c0)="5ee90d7a28ae49d4bdb2c296a362b61ad4c0c7c5c52533f84e670fe9559188392d747dfaae4b59f947647418", 0x2c, 0x9}, {&(0x7f0000000300)="d329f938ae7701645264874fd7d304f25f5480f4d3b08dd3a949a7746430b63efb26b343f62a1645c6ab4570b78844f5f89526826fdd6fbee2cae8aa35ff92d54d1a4cf7919751921f9f563db88315821bd10b77a9f8eeaa817ebf11b38eb8bcce496facc3c0e57e33f908bccfb13fd2a01908ee5cbd48b81250aee6ed9490c4ea429b3b90688f9a94ae70a867d041f2", 0x90, 0x3}, {&(0x7f00000003c0)="86a70140ade3dfeee54db1cd7927a7bbd0e5f81b69d1c9369d4947b6af75472e28c4dbaf27e303ba9105f3aa392d54593af14510de99e0596d7ec2b67e831b999cedd4b14a28bd80170334a71757e849bddcf4eef0f22dd7e8fd5ce667aba7e57612299f3a998184cb35287bdc5e3b54fce19305758498b9d735ae4f3fe12b7ff00dfefd07699d45833f384c31cfeec2580844d42ccb3aa6603b92196ac4e1a6208dc455b5c2dbc3ae6cab4ca5a257c69c00f12444da0f6fc3285ff172b5fc12e419eaf00f624ed7a8b6bd61ae1497e8e912ce5429491b0693bc9591aca3a97b45cc5bdaefc15cd4843eac3975c745", 0xef, 0xc}], 0x80000, &(0x7f0000000540)={[{@prjquota='prjquota'}, {@nolazytime='nolazytime'}, {@allocsize={'allocsize', 0x3d, [0x25, 0x37, 0x65, 0x74]}}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x34, 0x33, 0x62, 0x36, 0x34, 0x0, 0x32], 0x2d, [0x65, 0x30, 0x34, 0x37], 0x2d, [0x39, 0x0, 0x64, 0x37], 0x2d, [0x35, 0x31, 0x30, 0x61], 0x2d, [0x63, 0x63, 0x37, 0x38, 0x33, 0x63, 0x30, 0x63]}}}]}) 13:37:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x9000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1164.451503][T14793] FAT-fs (loop3): bogus number of reserved sectors [ 1164.480098][T14793] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1164.576223][T14793] FAT-fs (loop3): bogus number of reserved sectors [ 1164.588548][T14793] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000060086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1164.623209][T14807] tc_dump_action: action bad kind 13:37:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xa000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xfffffffe}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x10, &(0x7f0000000300)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x8) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000100)=""/54, &(0x7f0000000140)=0x36) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x114, 0x32, 0x2, 0x0, 0x0, {}, [{0x100, 0x1, [@m_mpls={0xfc, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}]}, {0xb2, 0x6, "8ee23758bd5cb70445ed06cbde2e1e8f61cae2a042ed2197a0e9b6616548a039c8e2674037fd37b2345ea26b9132ba43b95a005901ba70d888d7b9ef41f011cc92780652cc19642ea9523703f6e5867037c6275a8fd681c844829552e84f77faaf2be170886d7ec83750122a2988cd900b96e48eb3cbcb920c8e51a6b78348ac829aecbd8ccb4f5122294e0f862fd8464862e2074fc597d9f53c896ad7f982acf51076dda8ee25d855e52aff689c"}, {0xc}, {0xc}}}]}]}, 0x114}}, 0x0) 13:37:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xb000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1164.790578][T14811] FAT-fs (loop1): bogus logical sector size 549 [ 1164.800620][T14811] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1164.818621][T14819] tc_dump_action: action bad kind [ 1164.864622][T14811] FAT-fs (loop1): bogus logical sector size 549 [ 1164.870905][T14811] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:42 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000070086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xc000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1164.906418][T14828] tc_dump_action: action bad kind 13:37:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0xb, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1164.960245][T14830] FAT-fs (loop3): bogus number of reserved sectors [ 1164.980607][T14830] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1165.005328][T14833] tc_dump_action: action bad kind 13:37:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xe000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1165.053304][T14830] FAT-fs (loop3): bogus number of reserved sectors [ 1165.059931][T14830] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000200086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xedc000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1165.175142][T14843] FAT-fs (loop1): bogus logical sector size 549 [ 1165.217878][T14843] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000210086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xf000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x10, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000380086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1165.443681][T14854] FAT-fs (loop3): bogus number of reserved sectors [ 1165.460859][T14854] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1165.483439][T14858] tc_dump_action: action bad kind [ 1165.521155][T14858] tc_dump_action: action bad kind [ 1165.575962][T14861] FAT-fs (loop1): bogus logical sector size 549 [ 1165.595218][T14861] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000003f0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x10000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1165.620952][T14854] FAT-fs (loop3): bogus number of reserved sectors [ 1165.633949][T14854] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1165.698852][T14872] tc_dump_action: action bad kind 13:37:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x11000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:43 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000400086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1165.885067][T14878] tc_dump_action: action bad kind [ 1165.904064][T14861] FAT-fs (loop1): bogus logical sector size 549 [ 1165.910621][T14861] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x14, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:44 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000480086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x12000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1166.079577][T14885] FAT-fs (loop3): bogus number of reserved sectors [ 1166.096512][T14885] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1166.135513][T14894] tc_dump_action: action bad kind 13:37:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x12060000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:44 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000004c0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1166.196094][T14891] FAT-fs (loop1): bogus logical sector size 549 [ 1166.204091][T14885] FAT-fs (loop3): bogus number of reserved sectors [ 1166.223155][T14891] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1166.237035][T14885] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1166.308189][T14901] tc_dump_action: action bad kind 13:37:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x13000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1166.359330][T14891] FAT-fs (loop1): bogus logical sector size 549 [ 1166.387217][T14891] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x2000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:44 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000600086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1166.493755][T14909] tc_dump_action: action bad kind 13:37:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x3d, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x20000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1166.661583][T14911] FAT-fs (loop3): bogus number of reserved sectors [ 1166.680864][T14911] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:44 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000680086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x4000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1166.797356][T14920] tc_dump_action: action bad kind [ 1166.808213][T14920] tc_dump_action: action bad kind [ 1166.810199][T14921] FAT-fs (loop1): bogus logical sector size 549 [ 1166.819769][T14921] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:44 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000006c0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x30000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4a) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x7, 0x1f417fd6, 0x81, 0x3, 0x1, 0x80000001, 0x0, 0x1], &(0x7f0000000100)=[0x0, 0x0], 0x9, 0xb4, 0xc0c0c0c0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '~\x7f\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r4, 0x120, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x86a4513b321c9fc2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8001) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 1166.922595][T14921] FAT-fs (loop1): bogus logical sector size 549 [ 1166.955992][T14921] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x322, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1167.081808][T14933] FAT-fs (loop3): bogus number of reserved sectors [ 1167.093414][T14938] tc_dump_action: action bad kind [ 1167.113156][T14933] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:45 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000740086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1167.148273][T14939] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x3f000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:45 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000007a0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1167.226027][T14943] net_ratelimit: 34 callbacks suppressed [ 1167.226037][T14943] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1167.243389][T14944] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1167.260385][T14933] FAT-fs (loop3): bogus number of reserved sectors [ 1167.269533][T14933] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x4020000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1167.362060][T14948] FAT-fs (loop1): bogus logical sector size 549 [ 1167.368345][T14948] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1167.424595][T14955] tc_dump_action: action bad kind [ 1167.448822][T14956] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1167.489493][T14958] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x40000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1167.539078][T14948] FAT-fs (loop1): bogus logical sector size 549 [ 1167.552901][T14948] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1167.617500][T14961] FAT-fs (loop3): bogus number of reserved sectors [ 1167.651564][T14965] tc_dump_action: action bad kind 13:37:45 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000ff0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x48000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1167.697656][T14961] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x3a1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x6000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x70, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_mpls={0x58, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xff}]}, {0x24, 0x6, "4b46ef9c11ec88ce63ef34fd0ff6100c9f1b6402cf69d6e2fe21a7a5e8aa135a"}, {0xc}, {0xc}}}]}]}, 0x70}}, 0xd5fc475dbbc10cf5) [ 1167.931005][T14973] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1167.939754][T14972] tc_dump_action: action bad kind 13:37:46 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000c0dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x4c000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1167.972223][T14975] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1168.083933][T14983] tc_dump_action: action bad kind 13:37:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x60000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1168.116630][T14978] FAT-fs (loop3): bogus number of reserved sectors [ 1168.125008][T14974] FAT-fs (loop1): bogus logical sector size 549 [ 1168.125028][T14978] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1168.141125][T14974] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0xe0, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_mpls={0xc8, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2}}}]}, {0x80, 0x6, "6c4aee1636971ba46e6b0ade9c7e59e8c779128e7e294d1fa30abadb95cefbeedfffcd4928677e9e57f5f5a758ac0bc354718c6d0e0955fffd57a718fbd782e471136814efce72322e52a7b76217c71919d1b0522d5d1b80142d2efa5314a27b8c2fb3dce37529753221b97f9c56da3fd704e77d2adefb9fa93c0b41"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe0}}, 0x0) 13:37:46 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000020086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1168.230654][T14978] FAT-fs (loop3): bogus number of reserved sectors [ 1168.238652][T14978] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1168.255378][T14974] FAT-fs (loop1): bogus logical sector size 549 [ 1168.261787][T14974] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:46 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000030086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1168.291139][T15001] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1168.295815][T14999] tc_dump_action: action bad kind [ 1168.306491][T15002] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1168.325982][T15004] tc_dump_action: action bad kind 13:37:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x7ffffffffffff}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x2200, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x65580000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x4) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000001c0)={0x2, 0xfffff609}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x87, 0x0, 0x5, 0x12, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private1, 0x7800, 0x700, 0x4, 0x9}}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x4e23, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9, 0x0, 0x5, 0x0, 0x4, 0x0, r4}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) accept4$tipc(r2, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) [ 1168.458710][T15007] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1168.491626][T15013] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1168.507003][T15014] tc_dump_action: action bad kind 13:37:46 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000040086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1168.547125][T15016] FAT-fs (loop3): bogus number of reserved sectors 13:37:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x68000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1168.604287][T15016] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:46 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000050086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1168.713040][T15016] FAT-fs (loop3): bogus number of reserved sectors [ 1168.738708][T15016] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1168.815800][T15028] tc_dump_action: action bad kind 13:37:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x44}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x29}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40811) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$netrom(r7, &(0x7f0000000180)="a7aaec25311880a3fc524eaeb167a2b4280052ad3f1e9976097632df0250cb15f7f59885f5118b69a52997d18908538eae6ac353051c5f78dcfef8f9ba6d74969b54a7a127086a2bb0caa843d49826e530fadbd217d21d98d66acb46d8f54c744413d7c9ab", 0x65, 0x20000005, &(0x7f0000000200)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null]}, 0x48) 13:37:46 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000060086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x8000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x6c000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1168.952369][T15034] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1168.983630][T15034] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x98, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x84, 0x1, [@m_mpls={0x80, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x7fedcf7803d2f1f1}]}, {0x4a, 0x6, "054b60a556f1ba034dfb4f836205e7ccb8c7477b8354181a4db4b97e904f19748121cdecd27528ab9d5ff96d2a86d08cbe1c9babe54643845c595f85df57b0f1544208b9e1ca"}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000000)=0x8, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_AIE_ON(r2, 0x7001) [ 1169.010270][T15017] FAT-fs (loop1): bogus logical sector size 549 [ 1169.039222][T15017] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1169.047379][T15044] FAT-fs (loop3): bogus number of reserved sectors 13:37:47 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000070086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1169.060773][T15044] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1169.089848][T15046] tc_dump_action: action bad kind [ 1169.145116][T15051] tc_dump_action: action bad kind [ 1169.158855][T15051] tc_dump_action: action bad kind [ 1169.202734][T15044] FAT-fs (loop3): bogus number of reserved sectors [ 1169.248957][T15044] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x8c00, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x72100000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x3, 0xf56, 0x2}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000480)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="64002000320061af000000000000000000000000500001004c000100140001006d706c7300000000200002801c000200000000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000040000", @ANYBLOB="4e8a575bf5bb49d0c787d1a3fc99e820037f2055585cc58a859975f3226fa3fa04a042142c39ec8596234bce09368fc2187c85e55dbd2b8abb48fd269e5c705cb02eef995e87c39026abfb070a1cac9f3649d50371f4eae7be9fe782f6d8da42de0b85a5315cfab368b0d4c26ddf8a5040ae8d5cf4541d2547fdc947f2a536509aeac3daec85ffa53bec00355bdf4ab7223b86d3dd6cdded0d4d6270e8a1bd62688b6e8dc3d0a0e9a612d672cf9f614ee4811c480b8f56a0ebd9a8f7bec7c36f0c0868f404d18d95d8e20167ebec", @ANYBLOB="5745ef6698c4bcf0e8d027a4d5ad3e5e9c056f0c49851b7bbe0d3d49a9ecfab37a6aacffda3b14cd84fc793a43b7edf5ab322fdb82a36acd5a40ee68580ef552bda2d766d61a7ef3c8550d257b2b5955de0328cc6121f73e52913594f5467c274c02fb8892c6638fef480f6c12faa4f13dc1f81993f1147f1c8dcff9fd811e48c5221da2ee3bdfef0f", @ANYRESHEX=r2, @ANYRES64=r3], 0x64}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 13:37:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x8040000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:47 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000210086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x70, 0x20, 0x5, 0x8, 0x2, 0x0, 0x4, 0x80202, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x1, @perf_config_ext={0xd, 0x20}, 0x40001, 0x547, 0x78a40016, 0x3, 0x2, 0x7f, 0x988}, r3, 0xffffffffffffffff, r6, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1169.506687][T15066] tc_dump_action: action bad kind 13:37:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x74000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1169.571447][T15070] FAT-fs (loop3): bogus number of reserved sectors [ 1169.590662][T15070] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)={0x5}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x6000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f00000001c0)={0x2, 0x101}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockname$netrom(r7, &(0x7f0000000200)={{0x3, @bcast}, [@rose, @remote, @null, @netrom, @bcast, @bcast, @bcast, @bcast]}, &(0x7f0000000180)=0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) [ 1169.667661][T15070] FAT-fs (loop3): bogus number of reserved sectors [ 1169.677447][T15070] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:47 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000380086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000000)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xa000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1169.763051][T15084] tc_dump_action: action bad kind [ 1169.776715][T15086] tc_dump_action: action bad kind [ 1169.811728][T15088] tc_dump_action: action bad kind 13:37:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="64fcf53f0000000000320061af000000000000000000000000500001004c000100140001006d706c7300000000200002801c000200000000000000000000000000000000000000000000001bbe0a4920e5375f070000000000000000000c000800"/108], 0x64}}, 0x0) [ 1169.913407][T15094] FAT-fs (loop3): bogus number of reserved sectors [ 1169.934836][T15094] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1170.007384][T15094] FAT-fs (loop3): bogus number of reserved sectors [ 1170.017638][T15094] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1170.150292][T15072] FAT-fs (loop1): bogus logical sector size 549 [ 1170.157159][T15072] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0xff00, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x7a000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:48 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000480086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) umount2(&(0x7f0000000080)='./file0\x00', 0xf) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000320061af0000000000000000000000005000014c000100140001006d706c7300000000200002801c00020000000000feffffff00000000000000000000000000000000040006000cc2adf410000000000000000c00080000000000000000005f981c2b95820dff06f378576094e1f2fc8be649c6e41e30a3e176cc47a87304593f4773e5b3ee2ee07adde0837c97f8c5b260163567a105642d394333ed34ced3bad6bacbfa1d854ed87727bfee23a819054b6dd7c8376919dd00533e00ccfc4aa49ec397fe4462e07f1d0903a8da565d0b0cbe1484463c2b0b94afb2aad3fb8a826c6f920209f0f77f8bd9e307ad3c42d0b709baa61bf8711ea94f5533b6", @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 13:37:48 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES32], 0x5, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x164, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaf20}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7000000}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x887}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x69}]}]}, 0x164}}, 0x60) unshare(0x600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}}) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x14\xccoPn\x9be\x13\x1d\xe5\x1c\x95\x00tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0>)\xfav\xd7\x03\xf6v\xf4t>U\r\xba\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xbc\xd5\xbf\x94\n^\xfb\xc2\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000380)) 13:37:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xc000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1170.433333][T15119] FAT-fs (loop3): bogus number of reserved sectors [ 1170.440179][T15122] tc_dump_action: action bad kind [ 1170.451875][T15124] tc_dump_action: action bad kind [ 1170.489558][T15119] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1170.498834][T15126] tc_dump_action: action bad kind 13:37:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14, 0x32, 0x137143893ddcaf61, 0xffffff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13:37:48 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000004c0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x81000000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1170.707323][T15119] FAT-fs (loop3): bogus number of reserved sectors [ 1170.747367][T15136] tc_dump_action: action bad kind 13:37:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x88a8ffff, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1170.757078][T15119] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xe000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1170.809243][T15138] tc_dump_action: action bad kind [ 1170.874540][T15141] tc_dump_action: action bad kind 13:37:48 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000600086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1171.126704][T15145] FAT-fs (loop3): bogus number of reserved sectors [ 1171.148332][T15145] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1171.224649][T15145] FAT-fs (loop3): bogus number of reserved sectors [ 1171.238340][T15145] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x40800, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x9effffff, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140001006d706c7300000000200002801c000200000000000000000000000000000000000000001000000000040c06000c00070000000000000000000c000c000000000000000000"], 0x64}}, 0x0) 13:37:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r4, 0x41, 0x8, 0x10006) sendfile(r3, r4, 0x0, 0x11f08) statx(r3, &(0x7f0000000240)='./file0\x00', 0x4000, 0x88, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r6, @ANYBLOB="2c374be40e4ba8ba9f5bf75400"]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_eq={'fowner'}}, {@subj_type={'subj_type', 0x3d, 'cgroup.procs\x00'}}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r7, @ANYBLOB=',\x00']) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_eq={'fowner'}}, {@subj_type={'subj_type', 0x3d, 'cgroup.procs\x00'}}]}}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x5}, [{0x2, 0x2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0xc}, {0x8, 0x2, r5}, {0x8, 0x1, r6}, {0x8, 0xc, r7}], {0x10, 0x1}, {0x20, 0x2}}, 0x64, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)="0cea1978e03c1aed74fadc91f72f84497003ceb5a8dcaba88d213d838cc837d7aed3840d7195f435dddb5fe85a873e75170b23d744481394c981e3d153b3fcbd6fa9491a42c2166f68b76133897cd44544bf83d8d84313147c514bddb60136eef2e5d20694f81991ba2f261c96c258cb08a342c331c038338eb9b0faa63a3083b2a06782e6ec0eab18b3c2", 0x8b}, {&(0x7f0000000240)="b18baed55e29b5fdd212ae069f3bdd4e75d47d58bee98b85363a471895ee82ff096b9aafa6f860073950182d3e90525493408b6a7f4fd7078093cc0c191f99c2f84fa4b3d44f45fc066c879f1b026279f09386f8f2004bc56d9ef2810b612507906e643901cdf426e8110d59b97e6f381ce7c86da6103316aa88fa01e5628fec24b7383c48b1c161ab5476f150ec868f1c0fde1e289fbd0ec0", 0x99}, {&(0x7f0000000140)="885b6553df87dbac87e9a7337b2a9bd7aa7d6f0e05889539c5e6126695e6ec1525149041628b91f2bdfbf1f853cce28fea4ffbde3bc5556e2d3751b334e852", 0x3f}, {&(0x7f0000000440)="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", 0xff}, {&(0x7f0000000300)="28abc92424d514fd5cc10a903e4cc743ccca522a06a2755dd177c2f360c95c66f2e01ee267c107ebe66f4306e5d173b706d736a9c31e4be70830b40b746673db83092ba1701202900788caf133237b2183a45bc4e507cc8c91c26887360961607ff776c0d66f8175798d4af075834e3740957178f2c88f0c140347f7d0980f", 0x7f}], 0x5, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r7}}}], 0x20, 0x4000000}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:49 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000680086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x100000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1171.460118][T15162] tc_dump_action: action bad kind [ 1171.480633][T15166] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1171.494890][ T27] audit: type=1800 audit(1594474669.472:66): pid=15167 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16314 res=0 13:37:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xc00e0000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:49 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000006c0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1171.537862][T15170] FAT-fs (loop3): bogus number of reserved sectors [ 1171.547930][ T27] audit: type=1804 audit(1594474669.472:67): pid=15167 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir078891483/syzkaller.GTilTD/2214/file0" dev="sda1" ino=16314 res=1 [ 1171.573745][T15170] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1171.626321][T15170] FAT-fs (loop3): bogus number of reserved sectors [ 1171.644263][T15170] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1171.709891][T15180] tc_dump_action: action bad kind 13:37:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xf0ffffff, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:49 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000740086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x200000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:49 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000007a0086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1171.928561][T15195] tc_dump_action: action bad kind [ 1172.087988][T15197] FAT-fs (loop3): bogus number of reserved sectors [ 1172.125655][T15197] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1172.195749][T15197] FAT-fs (loop3): bogus number of reserved sectors [ 1172.204799][T15197] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0xffffff1f, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xffffa888, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:50 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000386dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x1f, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x0, 0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$x25(r3, &(0x7f0000001800), &(0x7f0000001840)=0x12, 0x80800) r5 = syz_open_dev$evdev(&(0x7f0000001880)='/dev/input/event#\x00', 0xcfd, 0x4000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000018c0)={0x0}, &(0x7f0000001900)=0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r8) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r11 = socket$pppoe(0x18, 0x1, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000200)="4a6252e4b0e4a236d020dd940ce427604e5fc01937dd31818475df96018d84ff8a04a9803d083e1c3375effa292c991d379267bfa845c68e507762f8180b59898e0d8c25f2bb5b8f29b68ea911f12712304f7d0e447046acda0e381077e093a2fbbc4e61c3b67683dbadc0b385c695c65f78f330175ad9357ee69c94414576505999c342c731b66997750ae3", 0x8c}, {&(0x7f00000002c0)="3941cc52d6d1a766e0aa4d7ad6594773c9967b1cda709296c1b1618bd70e1894d0b0bfcc1451dbe26d0e1e80f7c4d0059dfe99185671a6e261cca011feee8b71eb0644b7a003ba8d0464e36f9d434b9a90e86da509269014d6b3a7291e151782e8be86dd7cbfd1db43cfa957e7d2042bd1d9f457c5c2ee766c9b70c44301156bab651569c6f8229af9a1efd479580fd1ce88e5317f4c1708cd071851cd9031d5f485b164589c7fca1db2573923cf42dd27b11bb7538e6664ffeed40cceb7ca02803a41ac021615850fe2c5d4a4ad754c6a133ddf3b5231ebc29191fbdf76332bf860b161186ce535aa06a77c8c1277f87c207eee3bd449862f7e072cfd46d9aff38bc91259863c942c2e66f94ee420b343ddc482ace5b98078c0562ecbb5855d740e7559d45e30eede91938fc4fdfe02d69424962e34a9af3eaaca5cd174b34bfab503353a2412998ecaa3a0fb1adefc789240a69c1791a6b9e1e59f04f75cc055b8d4253671dedc3fd97bca5c3d30b62ba610efcf4d489a2d98b31d1d466f488858bf2edd1ffd768beede3a5741fa9e3acb9fd743214eeeb64005892b56abd81e9e69e670f9b6b63dce005c9fcd0cfff47eff8a49f6936df1ee8600d46fb84608ef79bbb0a03f47e07bacfc0151f1574de28c265ce6b84c562fbf59e189d4d59bcad457161883b370387127fd6dfb33b6fc0a319e20ab026820f5a1a6b9ab942f0f873e96819ad8d7a6e1004508a0633e0118ee0415e2cbbde2bc100b3f0c33e4925bd2c61c2c665a86f966a6ac482758305cd71c8bd4b4ca8b5247148b93c4624e8855ae890ddf2e25465e9d17ea04a5937946fd6bda7c3004d586089600173d44e41778437e7250065bbbf94b6b2556d1d5af95c807a08da06552d974d10167ea722541aa30b5a84c19abe1ed4c0c46227015a083025e432b00dd28e2b2e5a47f8240dafeae535399afa2cc76f13bc18c43720d010d8c6ae4f81e71b64ff4bd7b5b7b491bd2d73d9b456dd3d99b8a1ffd463f7e9f17ace2513ff0fd17bc9dbd634c531e7e81b2ed450438b2f15aa35e80fc53a42e2151ba88893fb82e43efb9676162cd1eebc9b4c0591871e996d2464ac7dbccfce599c6abb3b0b8100a219e7fae1a041a9bf1ae83b661bd808c774622729625f808eef8eb81d8ddd9d741880992754401c07fba7108df598c8310e5e03cc329f80f3c5e365144a577c6de906fa5d3cd39ff06aa97fe236b294a43f502c790fd32c3f632a73527717ea8e034cc2aaa0dc6b7e632202f2a50d777a8968b81a159ea5a6e6073a8ea1f953946c24a57ab3ab31d9129e7cbfbf806de2b77e5261e576ba567343939b39a293646f496b179e4ecdd4c66e5af545ba26d7a9bce6a2ac991b5ff6ff1b863b4432224e2de2c235f7c15a29bc18b9731f7b5f7685c3a90756d6d37f2f3cf2f8f5dc97941c7676d4c5ae45e20bae4290cc42e376eb8f1aa59608bdcb83ac12e88292f9fc1c006777c0b43c51473a7b401aa6757032ba50a00bd66f1206ddd98ea925628411a7989afa8ab782769127f45d80d8e3d923a3095ef0329a0b012ae980520b21f6d1ed344c3d1e7e33f37974c45db04e0a85daae9af05bde967a70962785c2ed651d58dad29991d7c2b0edbd3b9a6001190a44636e17a8172856844b5e39cdaf61ee0302a67c98994a7d245010a99dfd93c905416152f4d95fe6ed491f81e1b705cfc9e61d5def66e8ff532ff064e8d18c9454642ec8c6aeccb3889c92da4d4650df3abd5f9475e4b899c9a50004f694653f4cca761db59cd9b9fb479e4dd5976ea9c148f23c0c0d1a2959ba580998b06853a756e5ae74e4318d956e05bb9ecb2c9333ac62b38c878fda7940823b34e9c0800841693b826165463a4cbbd4725ba507fc4898270543724a68f894435b4a83e6e1eb7d0fa6501b1a8caae88c8c6f59ef5084e81b9b7eaf9c883972fd867fce648ebd02a5d979297efefa7576679848ec262c584a0b340a0c8658aeff0a35049e7fa85b5189109fe04ebb5abfa2e0aa306e847f76135f27a64c2d038f381ba33e20a293aa427bfe5eb77bdc7e92a4e7e105d8e161bd9e59321dafddc3b131e37ecf9d125cc109da4b766b0a7e7825a4274520cf9d2be8b1bf6886041d53a5fe7af4d962f68a7d1f373bb2f8a4612b39dff2e7fc4f30440999697ba570f553e9c09f480348bf4f90a5530c4dcc78e21b7fe1e614ba64d34f36d35f84dd654ba1cf3fdcc7c2aa8b931615cd72a48962dc82b5f012c3653e8a2eb959c81b5b082f5e1f431f6ba6248065435ed53be777c10abbb789b2f1a1fe5dbb48fdcc0367ee6494e68da5e71f2ab2850acc6ce9a28025ec5f713ef710a3a4cf1990faf6aa42a99c3202c76c1211e38b2f8e01732becad297a3302e3ffa1b7d49c4c23938c044d49cd84b2001e50428fdc7f0eb13efd90627cdfa218767f67c38bd98ccc9d2ac29f90c93d305408d9d84525a0a1264f3c49a236a43483cab808a1f56a8f813fe88aa34877a4443f360ab6cfd1bcc584018d9b460b8fc4ea33975c6c9691f4f43f21543ae128802af6e288fd9737fb13b3b6aca5e2afa84ee3c54361369df5767fe410aedb693196d7c36629c213c62aec8c8f714da753156cbb15c27948eea2195d2c1dc8504ef8756657979da2b9b1f097018f1b68b04dea2f9b687dec4fcb78519155fea7233f93bbb1048c87200b2211079a1a3d66f9a3f317460156ba228877459af3a06c66edf18aee1346abb24ee22469081ade6c7aec1f72d95c0702ce989679e952ff1a3e62bd28d892ed7b64d231d92030bfbad87c02c9f58e7fa37c5d6512b92b41e57e6248f24125058950eee7ead4714a508f2277343fd5b5b4cee4a4f3bfb4c47409735361a84b39b19e7d0a196bd6cbea8b530e4607fd6ff3b4a4213588878e23a1bf63daff3b89e5fa1802c5f88f71c24896b04cbec91b69e350c90966fc89e3b54edfc1d96c321cbba0b3addac42af0ff6dd7838d7812311fb5ef860bbac69a512fb3ca23a472be9501497b4e0c69d861f11bd89cf19c7a4148aa4a4e6b0965a0e67d57d15007cfbd6e765bbad1f66a02e3409e69c838ff4afed8ca4495d07d0f6175cbcf74234ce8788a08f0322a8b2037b996491b75f9c181f1800f3c9b33afd9b14b6a512d01be8612596b8b515cc57760893c407152104b6fd7b03f5b623fe3487fb3a80ea58fcbcea419d9dee6a4880333e8eb67af1592f1af46f6833ddbbeb088b75bb262ee3917a7e7af668c58a5cf86f5345f870b6c01cc297a371e7a57d20cf746eb00662183c35e0ef6e5f72d88e0979c664c759ae13ff64c984baa8dcc60fde51857b385876d3dfab731ec67444a516aac2aa76ef93b521f0360fba62da940430c23ceaafbeb05c0a50a21ad8c5a6c2898b1eff94c3a93de3750baeafea30088054020fdee8cf9e6a9ed3af457a3f5d6d687a3ce0d51c4ec68ce2d791d12a22fe3157bca60167197bb3d282523ff04ae164c9a048652693f2aafe177df5738f2cd6690d3010cf8bf8a75534b322f37aa1c95635fdc11009ecaf508867bed005c4b936327e57a051728ff65572959c67dca972cd566b2447630bcd82f76168a94adb68149fc09ba15530e19fb2189e4be5e80fb74b2f10ad6c994ef15de9829e2bfb4593d3531fcd9351f9a7d21d79b76ea675ddb443cfe9fe47548301fda05ad15b73b6d75c5b140ad177e11c1fc46b3a9e73c58893722027ec0b54fc8fc958b2c3aa7b17855022e099ec3f9fc35a6a046b0d7efe0746283f446b985788b95e61e92c9e2bf34ca05907ff77b37bd7c2bf1e890f9f7557973da5f3c0ac6310037f39228677be825ffed582bf50c9a8ac460f2db5b506bd148320c5cebef4793776cab4de38fc45ec3178c90fd406c48d57d1ebf3b2d4f77f2253b5bc0a3138f4f79c9f3e9ab96e30708ddd85914d5b5494b86924bf22a0fd5943860eb12e8cdf9baa30fb6ee56f47ef160f491b5bf31f08e7f3882d9fb46455902d7cb468bdb11c01d071dde2e8c6c238f0c5f9f0ae89b34c00fb904f561484b74f2e2fcd57faa1c7a331c7f5e06cd76990d4b7408b57d4c3b5a3d0cbcbc347e78d62eaa79480916882043f060e6888ed76674d6ce20e50227a6b97d91df393c73e69606e37c91b0bce25bb34e735979fb6442761017fc32842dbb22b58152513b0db3ec25928473a57e2857355020b5b6c67045179bac62aaf11192ddf72950d90e59ae4ced86e82fadc736663c865253a9d9365b702c394ca48a2e13a28623d2778f9050f45e25ae0c9db8173611ef502fb374a8fa55c71d98013b70835bc52646e56bc705985ec750f26263c1bb02cc5d84da1796e43654b7960947862f1ee2d8d3e8feb20f671f42498fc2bad0cabc5e19fa8e35f7b7336ce32eeecd57513c15883caf67243ea7e7e5231a1c9a47a0cc2c3cb3434a31494f99dec3d4478a5ec87361fe9d6323dd754636c6d21f328873f7b89f27a69a120cd3450b37a02d7ded351cf0b0d0a95b54dbeb6a7b0448d6f1087d925a66f91e882698a1de67dec23b841c7bbd3db37df19370d3f62e79cf5cdfa022e94c6baffe075f8937cee16b068f6ceaa2b7e70a5c697694fbf0c824c2fa9f54fd3437b00f9e4b98fa30cd0bd92254cc418ebef32f53cef82933061b5daf4d0c7ce646c697f3f3319b00712b5ae5e484d0ede7ef8503e9516060a3f12b438ff68b669b3a12b16e33bbf3c75fa84cdc7d9ef39f8448376a581aadabbfe0293031d43f1e265a6f98f7c4d00c268d013d79cdafb1bb1d187a11e5c62529852a6de1e8a2bac0e3da1f32efa0d2b89bdf050abd0ded30f03de0c342d5a87ee08e3293ff2bd26c504f317d1c2b121a53ba8393a0f7b3912feaf1d1676b3f39cd8c4ff59be5a0b90459d15cb2b6794bb9ededed3c76e13c2b0784af6f5500dc1daf9cd1f909690dab0e502d1874a74ffe0748f83c0fc49bf3fe683611b69657efed4d9ddfa4df9dc3da0b45de3874aebac9ee1be6ade11a1bb2dccef2642c315e5f327cc87412ecbe5209404a7a7e13cf39d4ef90e09bb4eeff29536240c7379ba00d80313388d90117e1e08ab139b25ad9906d7d739648f159179aba0e476138de985c99c840341e765b0cee4e70234f807a348ff9dd1ab41276cf19b4203bd9f1aa27df84cd49bc58890d6dbafc7c1ef0e1738a476a1bc3564dd0fdf26d204d75f6abeef362a4d6f98576e251b88142d98cf493664b14a5e011ec4dd6d770345e38b98b582b20845ec9cf28c89744b1fa3ba729da9d889e3773edf70a673567f6a121377db020d609db58f6f9a3c95f7fae3a452cd6de43d1c5223c4b0d1b47a69670aec611d16f3909afe63f24839d0cddfe6e79003479bf44764a271f65b7386c4872efbc6940b464bb36d13657c57acaefaa7be204702f260f7eb449dae37f6cbe2c0c8099cc3e78512243abddc7088aa038284de54277bcede142d60cacea2e8d91b533a5d74ce201cb871a20939daad9db58cb7f87dd6e744fe459ddd28c9cf72ac6b0750eb74401df9adf8b11be867b15b774425da5a9e96e11ac17cf9ee77cda25718ccd318a09c4b552057d19e3959f7e77aaec314190249e0198aa830b5123a18c95743ee7d6bc59fd547161c806694d034838fe70af854df22c6f2fec2459e4ab8162ad6a538ec9b2f3147cf15e3f14bea06eb6dd1e3e9f68945792139d561789272d855ee15d5e6560d5cb4a4768526741bc610a711b1578f20fdcf279e40f32149e4b0bf72cb362c9539525a8bf642", 0x1000}, {&(0x7f0000000000)="563c40037ad43f7525cc3e9138", 0xd}, {&(0x7f0000000080)="05c3e74160437e22c7798cdf098748824648a17c8ab9bbb14965a4517b601bf5dbd8b2655f190c69af6152b72d", 0x2d}, {&(0x7f00000012c0)="41be475f7c8787fc60a635dee3579c1812db8fece082907a76c2dd7b68b9f64380aa652a6d27b2b2f3eb7beae90856a4f9634aaa7c3f6e1500c64e0706e72d5d4cc44081c269ae405768d5ddfa28621473e2fdea4c1412924b79b4b00cc40a7fafdf19aec85c7561b99979b2696cf90c1fbee6a71ba112d5093766bc3f06ed7b08e6855fbea00690b18d04", 0x8b}, {&(0x7f0000001380)="599e43dbf7ff720bb6dd486a703912c2f173f71acb834ce99bf0e84c5af9372eba076203339a25a2afc4b842c448197c04c0228f30193f8dabff4c65d167f84f1f14c2e5acda4010cb3959c91e0cff1dd6ed7f2988981314bee88ad166edfc207bd91d45ac94c4c4898991304d3555c2fc103c407b235cba8d932d37904e7ec1003cd6f42b5ac4f9df34ab5b4ef4ff2b5a8f7809c7d3898e", 0x98}], 0x6, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r1, r4, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r9, r10, r11, 0xffffffffffffffff, r12]}}], 0x138, 0x20000001}, 0x10) 13:37:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:37:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x300000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1172.478386][T15220] FAT-fs (loop3): bogus number of reserved sectors [ 1172.485267][T15221] net_ratelimit: 25 callbacks suppressed [ 1172.485277][T15221] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1172.493825][T15220] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1172.519141][T15226] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1172.546802][T15224] tc_dump_action: action bad kind 13:37:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xfffff000, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1172.571369][T15228] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)={0x1, 0x0, "2b298d875d681fc24b93f76358d30cb2a413c5df4a9fd9359bb4f6d0f0d7992807c1d0d3874c468ff6dd17571918b3f619d836b27d93dbfa3b51627295d2ebc2cf47de17d4bf029bdec6bc524ecbb49f5952c046d345e4744d14ca787fc79f4fed4252885375b954f5528a5397a82aa22eb996dde7a0d4693f5d570abeb2503641f5549ea616cc0eb7c6f7f9aaf7f2c38eb478b3bb0f00a479638b38dabb36f0aed152b1b5d76cfabe465d39183081c9d1e12600470088aa32257cc75e1b312567c49a93e0ef42a797ea447ec34dbe7e644d89b3b74499a04fded889"}, 0xe4, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000)={0x4}, 0x1) r3 = add_key(&(0x7f0000001600)='rxrpc\x00', &(0x7f0000001640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000000)=""/4096, 0x1000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001040)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000001080)) keyctl$unlink(0x9, r1, r3) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 1172.691057][T15220] FAT-fs (loop3): bogus number of reserved sectors [ 1172.703457][T15220] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:50 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000586dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) [ 1172.761580][T15240] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1172.796768][T15242] tc_dump_action: action bad kind 13:37:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x348800000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xffffff7f, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1173.174709][T15253] tc_dump_action: action bad kind [ 1173.180894][T15249] FAT-fs (loop3): bogus number of reserved sectors [ 1173.200971][T15254] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1173.213427][T15249] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1173.242321][T15255] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1173.316348][T15249] FAT-fs (loop3): bogus number of reserved sectors [ 1173.325472][T15249] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0200000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r2, 0x41, 0x8, 0x10006) sendfile(0xffffffffffffffff, r2, 0x0, 0x11f08) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4000, 0x88, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r4, @ANYBLOB="2c374be40e4ba8ba9f5bf75400"]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_eq={'fowner'}}, {@subj_type={'subj_type', 0x3d, 'cgroup.procs\x00'}}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r5, @ANYBLOB=',\x00']) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_eq={'fowner'}}, {@subj_type={'subj_type', 0x3d, 'cgroup.procs\x00'}}]}}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x5}, [{0x2, 0x2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0xc}, {0x8, 0x2, r3}, {0x8, 0x1, r4}, {0x8, 0xc, r5}], {0x10, 0x1}, {0x20, 0x2}}, 0x64, 0x2) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r7) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x5, &(0x7f0000000440)=[{&(0x7f0000000080)="040e3ed68259789aea52d9055505c76a1f41781781", 0x15, 0x7}, {&(0x7f00000008c0)="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", 0x1000, 0xffffffffffff7fff}, {&(0x7f00000000c0)="0837f036d73d1f71b5c54667fbd885c3a3e65f0a4b8f1c3bc120b60206e068a1f1487220a45c2550270c360b45901e508806690a96d60f66179c98", 0x3b, 0x1}, {&(0x7f0000000100)="72faf0a25a6e200b324bb8188d666fd83170f4d7ea60b096fa02de30223c1ad969caac67c894b138a3170daa192d8aaf3f443e3cae4656e81ac29a6b90a2ec1180b19cdbde7f6d5c1519421d9d6b94f4b0bd9a1f1dbf65fd16cbd1e95c59908b77f390db957d", 0x66, 0xfffffffffffffffe}, {&(0x7f0000000240)="38428ce35477ef717e4e15b0f95d575f21d730a48cfc23c10accb6159be18ebb749a2ab575e85e314b91ee4ca6e79c6481a7786d033fa9350094e46be2221f55b24627e5c0a3b1b675cb701ac2ca8afe5ffb5127696b627f77f24ee4f4fd465738a9c4afebe807d3b2cddb3da87b7a396038cf010e5a2238c6e4a010f94cf616a14b2d23908331d5a3720aab70af4f2ca4995ef1a8fad764ba6f33135cf04afdada845df6abe45746da9bf14ef89c5342af4baf8c337a586b96f6f437378a4d492b903563ea355eae5cc63", 0xcb, 0x20000000000000}], 0x200000, &(0x7f00000004c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x70, 0x37, 0x30, 0x31, 0x6d, 0x2d, 0x33]}}, {@huge_never={'huge=never', 0x3d, '\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82'}}, {@huge_never={'huge=never', 0x3d, 'Q'}}, {@huge_never={'huge=never', 0x3d, '\'#/&&'}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x37, 0x3a, 0x30, 0x3a, 0x35, 0x38, 0x38, 0x3a, 0x33]}}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x6b, 0x25, 0x32]}}, {@gid={'gid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role'}}, {@fowner_lt={'fowner<', r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x13, 0x32, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x40, 0x4, 0x4}}, 0x14) 13:37:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xffffff9e, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:51 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000686dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x400000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1173.538528][T15267] tc_dump_action: action bad kind 13:37:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xfffffff0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1173.569230][T15271] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1173.583249][T15268] FAT-fs (loop3): bogus number of reserved sectors [ 1173.592975][T15268] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1173.605610][T15275] FAT-fs (loop1): bogus logical sector size 549 [ 1173.612857][T15275] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 1173.637568][T15278] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:51 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000786dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1173.699081][T15281] tc_dump_action: action bad kind 13:37:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0xffffffff, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1173.846903][T15275] FAT-fs (loop1): bogus logical sector size 549 [ 1173.852599][T15268] FAT-fs (loop3): bogus number of reserved sectors [ 1173.876800][T15268] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1173.882681][T15275] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1173.893288][T15294] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x500000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1173.968237][T15297] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1174.016970][T15297] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1174.020103][T15299] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1174.051217][T15300] tc_dump_action: action bad kind 13:37:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000060000000000000001004c000100148087006d706c7300000000200002801c000200eb0000000000000000000000000000000000000000000000040006000c0007000000000000000000187316787742000000000000"], 0x64}}, 0x0) syz_usb_connect(0x3, 0xd6a, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x29, 0xa2, 0x21, 0x8, 0x15ba, 0x3, 0xde1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd58, 0x4, 0x4, 0x81, 0x80, 0x63, [{{0x9, 0x4, 0x1, 0x1, 0xf, 0xc7, 0xd6, 0x36, 0x2, [], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x1, 0x81, [@generic={0xdb, 0xc, "130512af8b6eb14f798daee7f2779b852205d566597f703207d2c66dd5d897d4fce823db61d658f250f461370225399a5eaf3fecdee8f6729b30dc57524c50be841a3191d415e930173d0b60a98d80a6cae853ad16e7e6eb0c771e13022d2c32dd166f7ea0082c0d2d8af160437a11ce45c347d01b1b02024b239768cd18ccbbf09c3ba7cba0e0423ae227727d9eb7afd0e905fb9d54917f95e1ea01632d50b9b6077af40f31f0bdc2b1e038cd25ba0751a871e9e1d303675a97cb0b2ac7d6206b2683c6654da3ffff8af6b809da228ea68e2b3a5e4006ed88"}, @generic={0x3f, 0x22, "2b2fcb83e6a683b949ed192484342334b2b16bd07369cd26fe786ade92d9e2014b5dd61350437f0dc346ea7744e4d9bcbd72ea471098ec4d64e813024d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x0, 0x1, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}, @generic={0xb9, 0x9, "2e59067df23257af80ef6066927cde7507d5df95d956c809830faf68e4ffc3024fea3c498e3daf0962224a0553f15deeaa42c63b06142738c4134465471ce2f0f756a03e731f0662570c05c08b83b59eed6721119b4a6ec100b306b10065dc8f9bf43029b58cde5fa4adb9a03bef0592d007a5ccc69726229c2e94a940955dc4d75802a4008742e0e652704df9113963d2c0c1349e2b1def1ca9089c13fbce79b456fe42e6aeacd13ffc20deb58d2e3ee25f4cf5ca3ade"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x9, 0x20, 0x0, [@generic={0x4, 0x4, "e1a5"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x4, 0x20}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x80, 0xc3, 0x20}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x1, 0x88, 0xfd}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x8, 0x3f, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x8}, @generic={0xb2, 0x22, "05e4bca821ba1a15cf587073f27de70c0a2094d252c8642f643eee581e31e5e761fea41992e4cb7305e09795225953f5ae8ef45155a21fa08f4a3fd65f1017070aff6a7118af221e7bd18c464dc84f9e6e02414abae4c0d565a6944a4dc39031f14fdad7d4d166cf88f9d72bfe192c3121e87cb03f886e3c82164ebea90dd49e5d39724d489bc9c95ecee6c90b417e8e8c39a9efa7868aaacc6c01b50bbde533d1132ddef86449e6f1411117b77c3804"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x1, 0x3f, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x600, 0x83, 0x19, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xff, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7ab}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x0, 0x4, 0x5f}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x7, 0xe6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x19, 0x7fff}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x6}]}}, {{0x9, 0x5, 0xd, 0x1, 0x60, 0x1, 0x0, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0xdced}]}}, {{0x9, 0x5, 0x0, 0x10, 0x6caeea7d1194bb3c, 0x4a, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xfff7}, @generic={0xc8, 0x23, "76a6187569b092a03a2a50c38e63a9de7ad8544f1554b5e40c59ee9471c3ce95c275c6125cb07bafdf25e659f35bda75baec9ae23ac147485e8948046da1ccecd9f48944fde0047e43d66b751e6772c513a28183a920b14dc54628e418cef75f3daf0eb953d9a547250efc419c6053a73b364582bb47b5df6b6172ba96b646e05fc8f5a4f93c42fc1ea8e9b428401ebd30f94e14f1709e3f48799c17af8739cb6ccff925b5fdf397aaeb9c7a397f06fa476e5a26e468997f0ebcc90c945949a8e9bf5817685b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x1, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x9}]}}]}}, {{0x9, 0x4, 0xe9, 0x6, 0xb, 0xc8, 0x65, 0x64, 0x80, [], [{{0x9, 0x5, 0x2, 0x1, 0x8, 0x8, 0x2, 0xcc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x9}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x9, 0xef, 0xf7, [@generic={0x1e, 0x7, "cbe6c56ecba2864c907db9f6d0d4548b3f27e325362bb9419d04de22"}]}}, {{0x9, 0x5, 0xc, 0x14, 0x400, 0x5, 0xff, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xff, 0x7}, @generic={0x26, 0x9, "7ebb9b897e17e79c2fd84dae2b88b11a5f29a92bb62bf37a08ff4b686204fb4cd972153c"}]}}, {{0x9, 0x5, 0xd, 0x11, 0x8, 0x6, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3f}, @generic={0x3d, 0x11, "e86201950604dd199180d8173771c301f57c98eb5451388f08bd30976315a75d583db108ac70d45c690bba7a3732993848c1578f15a64c8334b125"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x3f, 0x3, 0x40, [@generic={0x41, 0x8d123d92ebbd3f68, "aa5c6456c532e0556e805a03cb5d72b6ce9496a795bdc8ae6fe46afce2d79b90570424aa7412162bd2b7638d56eb1d6c24f7f2168172482d24152a95c14f34"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xae1}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0xee, 0x8, 0x7, [@generic={0xee, 0x1, "90f8097612749d000bbd10eb937db8956c087e86a874fe766829c181077d70aaad46f3a1de0f5e0786adc9abb28e9ab8f945f7d8f92445e819061904467395bb2b392076a769d6d762691f960d9715d00bf1c3e913941ef7679535bd28e5fe4a72bc545fa7e06487ef65adc8c0997ab0c934539b3c284098322ab2ef8871182258a960f8bb5dbc3835dad5fb328ca03d5de12236087944300486e70715fa72e4aa3c0739661f7296fff9025f11509d66911d3aae0c4e22180255d2f50902cd72a3b789629210478a79ff199a4964490b4939fb4cd292d6d1347d9c4ed3579ade14d315331addc560ac7626e3"}, @generic={0xa7, 0x31, "247486e271fa0fbe626d555203a815a3aa5c9995ddebc0a3384ea1968c877bb583386859bc6c929c1296251cad57280311360c03f523c44bff1f640dda8694a2cd67c17967af56f562dd8214c1f9915f3afe1f91c28b1c559741a89db38ba3d3a00ce77e38efa2cbc00002a97f56afe69e472242809f9243fa8f97762bac3f74c315b3c3512cd84d3709b1eff6340659a4ef89ed03cd1214f11d771c00723be0d1d3942efc"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x2, 0x1, 0x40, [@generic={0xe3, 0x23, "28a3ca012df11bb1b87cb77139712ba38af4bbba9ae1d35c9a9f6da0df04187f53dfd900a4998a7a3482536f37e53a38167b0bbd8a9a913c5b648756c2064b2273c9ff3369d6806c7ed56078300148b60202e3b3b9bac0e9c3b09ca54b45889d3435fd60774e8a3e1e068bc126b2732c423f4b2fcfa3ec499da109cdee7228f29ac1206e7b40ecde2749069992a997732744e7f1ea42a53996bc01b5473d0cf33c49db364979956eb1fddd585b9cbd8b6b412099c06b3a44bc1f4e1e84221d39711bd88adcd2c2ab34ed0cff7ee9d8a3f41dd2588886d8a35521e8e24aa8abf798"}, @generic={0x5e, 0x21, "39d6fc74859843ef0d1f0709b769199f0d664df35768470bdd00015e31522f7806b08f15142659cddb9352724614735b197572cef6aa607d60efee473a1f313dbcd5761923341d063be7effb177e35b73bbbba8faa7b3a3119da1c0d"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x9, 0x50}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x9, 0xc2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x20, 0x6}]}}, {{0x9, 0x5, 0x8, 0x2, 0x410, 0x20, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x1, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0xe9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x1f}]}}]}}, {{0x9, 0x4, 0xdf, 0x1f, 0x5, 0xcd, 0x21, 0x26, 0x3, [@hid_hid={0x9, 0x21, 0x1000, 0x3, 0x1, {0x22, 0xfdc}}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x3, 0x2, 0x7, "9060dc7350a16a"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x9, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x40, 0x3, 0x1, 0xff, "e7", "3ee2"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x1, "9c", "95e2"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x40, "cdab60e0f19511a3"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x2, 0x80, 0xff, "eb7c1101223359"}]}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0x6, 0x33}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x5, 0x1f, 0x9}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x8, 0xff, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x2, 0x4, 0x80, [@generic={0x75, 0x3, "83e4cd3fe879429cdd1f321c0714554276cb33d6eab7d8425a09850e53dc0f0e22f61421a27f6019fdda3e953e01985c1370b2a4a00a995ce0cbefdfe033679d812fe96d69f7bee783f63b13b423384b154a629d13885c9f1e015f25e34826e0c68c125c0e44c34bb95c560b300a718bc63641"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x5, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x250}]}}]}}, {{0x9, 0x4, 0x75, 0x48, 0xc, 0x66, 0x59, 0xba, 0x45, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "2fd4bdb22a"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0xff, 0xa4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x48, 0x81, 0x7ff}, @mdlm={0x15, 0x24, 0x12, 0x67b0}, @obex={0x5, 0x24, 0x15, 0x800}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xff, 0x3, 0x8}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x8, 0xc, 0x200, 0x6, 0x1, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x0, 0x7f, 0x2}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x81, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xf0}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xcf, 0x3}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x0, 0xfb, 0x4, [@generic={0x21, 0x7, "2ba3ff1e0a7b65a9128d5ed18707170e1313ea1ded61661d649c7a010669db"}, @generic={0x11, 0x21, "7a68cbbe2120097d3d55f06dc29775"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x80, 0xe5, 0x4, [@generic={0xb3, 0x11, "781312c458685eab922ee9cb7ecda9e9ce8b796f7a6a2dd364584b2d94bf48c73df83d5bca9b472958d7c05d3e7275ebc055e50d42ff2c4dc03588dad64c084acb5f6a50baabb9a31e323135bce7ad29f053413de983a53c67f644bc1189298d2035b1a4991faef40229db045789c8ccbacf09d2d188eef93907853f6c4d9686ce9524d80cb24bf87d355374575f46a0c745134cdc578c0b378468b7a9669fb2e0bb1723e0fa0103b4bc85b64da179abfd"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x7, 0x6, 0x81, [@generic={0xaf, 0x22, "0364438d06522c1d9c210844ddb43c3ca1a739c7f81a0096910477788424a49f655317305f733804e8f973a741364521ed0183d0bcd162594a4223081c4cd9d2b94d839750740995c6d73a44fd7afe78b04b2b255915b77dea06f2a2bda6adf54e8d72157a933ce4c120d45fe9b0d922d828d6911b866201b532f38ad797576ef369d9ee4fa5399b9ab7f67734ad23a35bdc5284ffd67d3caf55403d3b4addbe9d79c86c0555ee25971d0fdefa"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x77}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x6, 0x40, 0x40}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x3, 0x2, 0xfa, [@generic={0xc9, 0xb, "75e0d93e83ccc0c469e34a2b575b50da25ff618629a01ee2638fe87cafc8a3bd70ce7dda710196d570018bb65449303edb62e9ed216edc5b50abff04992e5ea736daf011b93fc8b6e6e1b781526b6c3a48c1f93ee9dd670fd9b4b0550bace587c66f69928c0b309d068d617635e1287a517c30dea08dad7ac945b8e33ff502002152a46c1c4e226a263065f29fdbf608b3277f18bf1e4579a7929b08d6920617743925aa78cbd9e5ec021c21f96629ee43bca64c103b696daefa519a4e2fb5d231536fae796202"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x81, 0x6, 0x0, [@generic={0x19, 0x10, "8e94cefb5f6c81988b1cc4fee51a34d8e80b82d5593212"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x4, 0x3, 0x3, [@generic={0x44, 0x23, "f4c22db58f1e2fee95d8a1eeb48e007f6c2e4a8c4adb86e8167e603b684b908a6e07527a9dce32c2ebc3e1423dd6dce9bf2bbf6cbd8e0c137310b9143e806e6b8752"}, @generic={0x52, 0x21, "cedcca90f42a10aece97bb56cf2afd22390140fad7ef9dd16104bd11af5084b8a21876b214faa46a2edff0178c4234d88195cf3c084b6c4a5042b5cbe093898ab4b9e75c8cf9ba4cecccfa1b3e51c4d4"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x6, 0x3f, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x7b6, 0xb3, 0x1, 0x8}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2, 0xb3, 0xff, 0xff, 0x7f}, 0x135, &(0x7f0000000f00)={0x5, 0xf, 0x135, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x0, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x8, 0xf000, 0xd5, [0x20b0, 0x0, 0xf, 0xd1]}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x3, 0xff00, 0xfff, [0x7f80ff, 0xff3fcf, 0x3f0f, 0x0, 0xffc000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x2, 0x6, 0x9}, @generic={0xd9, 0x10, 0x4, "abc5917dbed4664bd635792e1adac6601406341b618d787680ab4631ca63d40e1fcaf2796bb1f751a95717a7bc853c48a6878ea01ac6d4347b702713ffdcc984be850179579428255e06cc8dfd5aa80a85cedee0d2937728aeff67d4ac28ee2278a600a7c42fed1774c966dea5a80bb70833342728269ac8aa0f5770c5e5bd4255ebe0a2d43438f19a0601d2f29cd2cfe7d1b9420a4155b37e787d4d94b206f6f372914c298c421fda228e4441fc136901727804258d18d7c5298935100698f108717b999698a7838f27b28fcb655963f98be61d0a3c"}, @ptm_cap={0x3}]}, 0x1, [{0x27, &(0x7f0000000080)=@string={0x27, 0x3, "21270af57fea3f36364255a186b1f0b32572f09a3ac33a57bbdb38f6cc6f37842bedb4c7ec"}}]}) 13:37:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0300000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1174.206670][T15307] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1174.261351][T15307] tc_dump_action: action bad kind 13:37:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'geneve0\x00', 0x200}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x600000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:52 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000002086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1174.411208][T15321] tc_dump_action: action bad kind [ 1174.422074][T15322] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1174.438263][T15323] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:52 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000002186dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1174.458437][T15315] FAT-fs (loop3): bogus number of reserved sectors 13:37:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x2, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1174.514726][T15315] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1174.523307][ T7892] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1174.554656][T15330] tc_dump_action: action bad kind 13:37:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x3, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:52 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000003886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:52 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000003f86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1174.653040][T15331] FAT-fs (loop1): bogus logical sector size 549 [ 1174.669528][T15315] FAT-fs (loop3): bogus number of reserved sectors [ 1174.715867][T15331] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1174.742902][T15315] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x700000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1174.762087][ T7892] usb 3-1: Using ep0 maxpacket: 8 [ 1174.962227][ T7892] usb 3-1: config 4 has an invalid interface descriptor of length 4, skipping [ 1174.971092][ T7892] usb 3-1: config 4 has an invalid interface number: 233 but max is 3 [ 1174.980654][ T7892] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1174.990011][ T7892] usb 3-1: config 4 has an invalid interface number: 223 but max is 3 [ 1174.999411][ T7892] usb 3-1: config 4 has an invalid interface number: 117 but max is 3 [ 1175.018781][T15351] FAT-fs (loop3): bogus number of reserved sectors [ 1175.026964][T15351] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1175.028527][ T7892] usb 3-1: config 4 has no interface number 0 [ 1175.040982][ T7892] usb 3-1: config 4 has no interface number 2 [ 1175.062324][ T7892] usb 3-1: config 4 has no interface number 3 [ 1175.068485][ T7892] usb 3-1: config 4 interface 1 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 1175.096655][T15351] FAT-fs (loop3): bogus number of reserved sectors [ 1175.100909][ T7892] usb 3-1: config 4 interface 233 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1175.108492][T15351] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1175.135759][ T7892] usb 3-1: config 4 interface 233 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1175.147731][ T7892] usb 3-1: config 4 interface 233 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 1175.222014][ T7892] usb 3-1: config 4 interface 233 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1175.254680][ T7892] usb 3-1: config 4 interface 233 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1175.266553][ T7892] usb 3-1: config 4 interface 233 altsetting 6 endpoint 0x8 has invalid maxpacket 1040, setting to 1024 [ 1175.280638][ T7892] usb 3-1: config 4 interface 233 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1175.361020][ T7892] usb 3-1: config 4 interface 233 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 1175.412219][ T7892] usb 3-1: config 4 interface 223 altsetting 31 has a duplicate endpoint with address 0xF, skipping [ 1175.439942][ T7892] usb 3-1: config 4 interface 223 altsetting 31 has an invalid endpoint with address 0x80, skipping [ 1175.472020][ T7892] usb 3-1: config 4 interface 223 altsetting 31 has a duplicate endpoint with address 0xA, skipping [ 1175.526698][ T7892] usb 3-1: config 4 interface 223 altsetting 31 has an invalid endpoint with address 0x0, skipping [ 1175.577551][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x8, skipping [ 1175.624872][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0xB, skipping [ 1175.643470][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0xE, skipping [ 1175.669348][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x1, skipping [ 1175.681478][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x3, skipping [ 1175.742635][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x2, skipping [ 1175.764667][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0xC, skipping [ 1175.777253][ T7892] usb 3-1: config 4 interface 117 altsetting 72 bulk endpoint 0x7 has invalid maxpacket 16 [ 1175.794927][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x3, skipping [ 1175.823393][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x7, skipping [ 1175.858101][ T7892] usb 3-1: config 4 interface 1 has no altsetting 0 [ 1175.885586][ T7892] usb 3-1: config 4 interface 233 has no altsetting 0 [ 1175.893350][ T7892] usb 3-1: config 4 interface 223 has no altsetting 0 [ 1175.939238][ T7892] usb 3-1: config 4 interface 117 has no altsetting 0 [ 1176.135410][ T7892] usb 3-1: Dual-Role OTG device on HNP port [ 1176.162145][ T7892] usb 3-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=de.1e [ 1176.186186][ T7892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.221110][ T7892] usb 3-1: Product: syz [ 1176.230626][ T7892] usb 3-1: Manufacturer: syz [ 1176.266496][ T7892] usb 3-1: SerialNumber: syz [ 1176.603081][ T7892] ftdi_sio 3-1:4.1: FTDI USB Serial Device converter detected [ 1176.611337][ T7892] usb 3-1: Detected FT2232C [ 1176.662181][ T7892] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1176.682612][ T7892] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1176.722093][ T7892] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1176.896163][ T7892] usb 3-1: USB disconnect, device number 7 [ 1176.937603][ T7892] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1176.974952][ T7892] ftdi_sio 3-1:4.1: device disconnected [ 1177.036284][T15307] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1177.068559][T15307] tc_dump_action: action bad kind [ 1177.442139][ T7892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1177.682932][ T7892] usb 3-1: Using ep0 maxpacket: 8 [ 1177.882340][ T7892] usb 3-1: config 4 has an invalid interface descriptor of length 4, skipping [ 1177.891236][ T7892] usb 3-1: config 4 has an invalid interface number: 233 but max is 3 [ 1177.913574][ T7892] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1177.939202][ T7892] usb 3-1: config 4 has an invalid interface number: 223 but max is 3 13:37:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x32, 0x400, 0x0, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x444}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r3, @ANYBLOB="00400080000000050000007f4710005c006400003f049078e0000001000000008923997f000001ac1414aaac1e0001ac14142e0a0101017f000001ac14141064010100831b11ac1414aa0a010101e0000001ac1414aaac1414aaac1414aa07070064010102000000"]}) 13:37:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000000c0)={'broute\x00', 0x0, 0x3, 0xc2, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/194}, &(0x7f0000000140)=0x78) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000380)) 13:37:55 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x4, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0500000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x800000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1177.982384][ T7892] usb 3-1: config 4 has an invalid interface number: 117 but max is 3 [ 1177.990560][ T7892] usb 3-1: config 4 has no interface number 0 [ 1178.042738][ T7892] usb 3-1: config 4 has no interface number 2 [ 1178.072815][ T7892] usb 3-1: config 4 has no interface number 3 [ 1178.078977][T15397] FAT-fs (loop1): bogus logical sector size 549 13:37:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000180)={0x2, 0x0, [0x9f, 0x4, 0x3, 0x6, 0xbed, 0x592c, 0x3, 0x2]}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 1178.114382][T15400] tc_dump_action: action bad kind [ 1178.152614][T15401] FAT-fs (loop3): bogus number of reserved sectors [ 1178.169087][T15409] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1178.171500][ T7892] usb 3-1: config 4 interface 1 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 1178.197046][T15407] net_ratelimit: 6 callbacks suppressed 13:37:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x5, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x900000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1178.197056][T15407] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1178.199202][T15397] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1178.222429][T15401] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r3, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0xfffffffffffffd5f, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 13:37:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000000c0)={0x200, "eca92853bf503c8c93a10da73f7833edec0b9bd5c3dabf031cee3c4948b192c5", 0x2, 0x400, 0x81e, 0x5, 0x1, 0x3, 0x0, 0xff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x29) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) [ 1178.287524][T15411] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:56 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1178.347332][T15414] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1178.359197][ T7892] usb 3-1: config 4 interface 233 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1178.376286][ T7892] usb 3-1: config 4 interface 233 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1178.388819][T15417] tc_dump_action: action bad kind 13:37:56 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffff000, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0xc3d3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5, 0x1, 0xda, 0x5, 'pptp\x00', 'syz1\x00', {0x400}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x8, 0xc00, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xfe01, 0x10, [0x3e, 0x1b, 0x17, 0x3e, 0x11, 0x4, 0x6, 0x1b, 0x10, 0x34, 0x23, 0x40, 0xa, 0x34, 0x18, 0x3f], 0x0, 0x800, 0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) [ 1178.400131][ T7892] usb 3-1: config 4 interface 233 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 1178.425833][ T7892] usb 3-1: config 4 interface 233 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1178.439427][ T7892] usb 3-1: config 4 interface 233 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024 13:37:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x6, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1178.450615][ T7892] usb 3-1: config 4 interface 233 altsetting 6 endpoint 0x8 has invalid maxpacket 1040, setting to 1024 [ 1178.469776][ T7892] usb 3-1: config 4 interface 233 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1178.480665][ T7892] usb 3-1: config 4 interface 233 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 1178.492238][ T7892] usb 3-1: config 4 interface 223 altsetting 31 has a duplicate endpoint with address 0xF, skipping [ 1178.504197][ T7892] usb 3-1: config 4 interface 223 altsetting 31 has an invalid endpoint with address 0x80, skipping [ 1178.515926][ T7892] usb 3-1: config 4 interface 223 altsetting 31 has a duplicate endpoint with address 0xA, skipping [ 1178.527797][ T7892] usb 3-1: config 4 interface 223 altsetting 31 has an invalid endpoint with address 0x0, skipping [ 1178.539221][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x8, skipping [ 1178.550704][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0xB, skipping [ 1178.562576][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0xE, skipping [ 1178.574171][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x1, skipping [ 1178.585681][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x3, skipping [ 1178.597429][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x2, skipping [ 1178.609043][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0xC, skipping [ 1178.620619][ T7892] usb 3-1: config 4 interface 117 altsetting 72 bulk endpoint 0x7 has invalid maxpacket 16 [ 1178.631277][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x3, skipping [ 1178.642873][ T7892] usb 3-1: config 4 interface 117 altsetting 72 has a duplicate endpoint with address 0x7, skipping [ 1178.655387][ T7892] usb 3-1: config 4 interface 1 has no altsetting 0 [ 1178.662779][ T7892] usb 3-1: config 4 interface 233 has no altsetting 0 [ 1178.669530][ T7892] usb 3-1: config 4 interface 223 has no altsetting 0 [ 1178.677507][ T7892] usb 3-1: config 4 interface 117 has no altsetting 0 [ 1178.722268][ T7892] usb 3-1: string descriptor 0 read error: -71 [ 1178.729277][ T7892] usb 3-1: Dual-Role OTG device on HNP port [ 1178.772045][ T7892] usb 3-1: can't set HNP mode: -71 [ 1178.775058][T15419] FAT-fs (loop3): bogus number of reserved sectors [ 1178.786343][T15397] FAT-fs (loop1): bogus logical sector size 549 [ 1178.801788][T15397] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1178.805393][T15430] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1178.812586][T15427] tc_dump_action: action bad kind 13:37:56 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004c86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1178.822862][T15432] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1178.827455][T15419] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x7, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1178.871613][T15434] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1178.922478][T15434] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1178.947583][T15439] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0600000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000380)) [ 1178.978781][T15440] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xa00000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1179.152908][T15447] tc_dump_action: action bad kind 13:37:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 13:37:57 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000180)={{0xff, 0x5}, 'port1\x00', 0x40, 0x110014, 0x6, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x4, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,allow_other,func=MMAP_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f747970653d6367726f75702e70726f6373002c00932d5d399cda7ec067ad99a7d4002255fcb319b373a362cdcfdec1faab22465996c198ee0a62c2cf9e14de253cfb32ee37e947c17cbdc1612d66d683a3c8d1e63c8872f5bfea05b21e2dd0cfc80516f4d638d6991470b0e8d9c2622f0fd61e9c0e704eaf69a1edb9a5ac070f"]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x5}, [{0x2, 0x2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0xc}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0xc}], {0x10, 0x1}, {0x20, 0x2}}, 0x64, 0x2) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r3, 0x41, 0x8, 0x10006) sendfile(r2, r3, 0x0, 0x11f08) statx(r2, &(0x7f0000000240)='./file0\x00', 0x4000, 0x88, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r5, @ANYBLOB="2c374be40e4ba8ba9f5bf75400"]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_eq={'fowner'}}, {@subj_type={'subj_type', 0x3d, 'cgroup.procs\x00'}}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r6, @ANYBLOB=',\x00']) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}]}}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x5}, [{0x2, 0x2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0xc}, {0x8, 0x2, r4}, {0x8, 0x1, r5}, {0x8, 0xc, r6}], {0x10, 0x1}, {0x20, 0x2}}, 0x64, 0x2) setregid(0x0, r5) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x14, 0x32, 0x137143893ddcaf61}, 0x14}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) 13:37:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x8, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1179.211020][T15449] FAT-fs (loop1): bogus logical sector size 549 [ 1179.246027][T15453] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1179.262990][T15449] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1179.285743][T15462] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x9, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1179.294949][ T27] audit: type=1800 audit(1594474677.272:68): pid=15460 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16321 res=0 [ 1179.298221][T15464] tc_dump_action: action bad kind 13:37:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\v\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16m\xfd\xc3Z\xb2\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\x8d\x8e\xbb\x1e\xf6:i\xa5\x8d`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82ZQ\x98\xce\xd7LrLZ(-\xc3\xe0<\xf3v\x91\xca\x85\xc2t\x10:\xd9\xbb^\x1e\x87/@gC\xedD\xe1>n\xf3\x82wA.\xc6\xe6\xf53\xb3m\x15\'[\xf7\x9c|\xedw\x95*\xc8\xc0L\xf9\xee\x10U\xfd\xcd\x0e\xab\xf4SM\x8b?\xc7\xd3\x10p\xae\t\xb4eG\x85\xf1\x12/\xf7g(d\xae\xfb\x9a\xbbTJ\x81v\x99\xcbs\xff,&\xfc\xd7\xaevm\x98\xbc\x1fz]\x17\x9dF\xb0\xabM\xd6\xb9\t', 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1179.372504][ T27] audit: type=1804 audit(1594474677.302:69): pid=15460 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir798943613/syzkaller.rFy2wS/2439/file0" dev="sda1" ino=16321 res=1 [ 1179.407731][T15459] FAT-fs (loop3): bogus number of reserved sectors 13:37:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1179.421478][T15459] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1179.463751][T15449] FAT-fs (loop1): bogus logical sector size 549 [ 1179.466131][T15475] tc_dump_action: action bad kind [ 1179.470071][T15449] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1179.505033][T15479] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1179.514856][T15480] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:37:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006c86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1179.547080][T15460] tc_dump_action: action bad kind 13:37:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xa, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0700000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000007486dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1179.703383][T15459] FAT-fs (loop3): bogus number of reserved sectors [ 1179.709920][T15459] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xa27000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000007a86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1179.893703][T15503] tc_dump_action: action bad kind [ 1180.080829][T15508] FAT-fs (loop1): bogus logical sector size 549 13:37:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) prctl$PR_MCE_KILL_GET(0x22) 13:37:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xb, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1180.124887][T15508] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004001}, 0x45) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:58 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000ff86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xb0a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1180.203272][T15508] FAT-fs (loop1): bogus logical sector size 549 [ 1180.212496][T15508] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1180.234456][T15518] tc_dump_action: action bad kind 13:37:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xc, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x6, 0x7, 0xe6}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x3, [0xffff, 0x800, 0x0]}, 0xa) 13:37:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0800000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000080)={0x2, r6}) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000040)={0x10000, &(0x7f0000000100)}, 0x0) [ 1180.392001][T15532] FAT-fs (loop3): bogus number of reserved sectors [ 1180.410072][T15532] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1180.426400][T15536] tc_dump_action: action bad kind 13:37:58 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000001000dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1180.471145][T15532] FAT-fs (loop3): bogus number of reserved sectors [ 1180.480150][T15532] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1180.499499][T15543] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xc00000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1180.553479][T15546] FAT-fs (loop1): bogus logical sector size 549 [ 1180.575806][T15546] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:58 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000005dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x100, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000380)) [ 1180.689005][T15546] FAT-fs (loop1): bogus logical sector size 549 [ 1180.694343][T15560] tc_dump_action: action bad kind [ 1180.703326][T15546] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xf, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r2, 0x17, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 13:37:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0a00000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1180.816583][T15561] FAT-fs (loop3): bogus number of reserved sectors [ 1180.854644][T15561] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:58 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000046dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x10, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1180.900075][T15572] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1180.925954][T15573] tc_dump_action: action bad kind 13:37:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getqdisc={0x2c, 0x26, 0xf0c, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x7}, {0x8}, {0xffe0, 0x8}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) 13:37:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:37:59 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1181.052606][T15577] FAT-fs (loop1): bogus logical sector size 549 [ 1181.058954][T15561] FAT-fs (loop3): bogus number of reserved sectors [ 1181.070035][T15577] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1181.077135][T15561] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:59 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000386dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1181.146934][T15595] tc_dump_action: action bad kind [ 1181.190717][T15577] FAT-fs (loop1): bogus logical sector size 549 13:37:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af0000000000004e4e76d1d819f0000000000000500001004c000100140001006d706c7300000000200002801c000200000000000000000000000000000000000000000000000000040006000c00070000000000000000000c00080000"], 0x64}}, 0x0) 13:37:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xc0a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:37:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x11, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1181.244178][T15577] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1181.342687][T15605] tc_dump_action: action bad kind 13:37:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = semget(0x0, 0x1, 0x4) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0xfff, 0x800}], 0x1, &(0x7f0000000080)={0x0, 0x989680}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2e000, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xb) 13:37:59 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000486dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:37:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="1000000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:37:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x12, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xd00000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1181.465395][T15609] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1181.490453][T15609] tc_dump_action: action bad kind 13:37:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000032000002000000000000000000000000500001004c000100090001006d706c7300000000200002801c000200000000000000000000000000000000000000000001000000040006000c00070000000000000000000c000800009f230000000000"], 0x64}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000080)={0x5, 0x2, 0x4, 0x0, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2) 13:37:59 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000586dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1181.567442][T15619] tc_dump_action: action bad kind 13:37:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x13, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x6, 0x102) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f00000002c0)=0x7f) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) finit_module(r3, &(0x7f0000000300)='nl80211\x00', 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x111a03, 0x0) write$P9_RFSYNC(r4, &(0x7f0000000280)={0x7, 0x33, 0x2}, 0x7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000440)={{0x3f}, 'port1\x00', 0x41, 0x10000a, 0x7fff, 0x2, 0x2, 0x4, 0x4, 0x0, 0x6, 0x1}) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x2f}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1000}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1f}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x40810) [ 1181.719773][T15631] FAT-fs (loop1): bogus logical sector size 549 [ 1181.743928][T15635] FAT-fs (loop3): bogus number of reserved sectors [ 1181.759212][T15635] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140001006d706c7300007500200002801c0003000020000000e9ffffff000000000000000000000000000008040006000c00070000000000000000000c0008000000000000"], 0x64}}, 0x0) 13:37:59 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000686dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1181.770064][T15631] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1181.787192][T15638] tc_dump_action: action bad kind 13:37:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x30, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:37:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', 'mpls\x00'}, &(0x7f0000000080)=',//!\x00', 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 1181.859119][T15635] FAT-fs (loop3): bogus number of reserved sectors [ 1181.868659][T15645] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1181.872055][T15635] FAT-fs (loop3): Can't find a valid FAT filesystem 13:37:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'rm\x00'}, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) [ 1181.904204][T15631] FAT-fs (loop1): bogus logical sector size 549 [ 1181.910463][T15631] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1181.959540][T15651] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1181.979548][T15655] tc_dump_action: action bad kind [ 1181.988161][T15654] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:38:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="1200000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x48, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1182.081460][T15661] tc_dump_action: action bad kind 13:38:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xd0a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x25, 0x0, 0x2, 0x3, 0x0, "cef29c1fa751f4d58dc954d1681262d9470621"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140001006d706c7300000000200002801c000200000000000000000000000000000000000000000000040006000c00070000000000000000000c000800"/100], 0x64}}, 0x0) 13:38:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000786dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x4c, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000002186dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0xfffffffc, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0xd, r5, 0x1, 0x6}, 0x14) sendmsg$nl_netfilter(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x26f0, 0xb, 0x6, 0x5, 0x70bd2c, 0x25dfdbfb, {0xc, 0x0, 0x401}, [@generic="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", @nested={0x13a4, 0x3d, 0x0, 0x1, [@generic="d3249f08660af5fbc4c1e8aec20ccdcbd150e9ea0410e2ef04268d5c66ed408cd223b91dd042e18f5d7517be620440fc4ff7ac201df516e786962d439c5f3dd0d8a5150f3158437c6a0712048f0eb181a9b62c5b00bab3758b4819ddc455ca273dad07919606533fa93a37b9d379bc23c8fd4408267c8f0adcfd30d00b7a792a0a5174fd38a4b53a852b3bca31c09ac07ac8542674fdc97698fde1f1b2768c41f4d6a94785a46eb13b273426a93741de825b896e0409a6ed23230def2e0c8922db89e2b869d86b3d2a1444308a438f36cb6e29d890b681ec9cd878d70099fae053bd1833d47084a2e16fea1bae9bae419558b0fa9ed0af3d44b959e84446ef9de051f9ad6ce4c87e1644240db23904ae16d36c43ad4ed9531e6f3964e6bb537b4ea9a317d253ae5aa06bd0cda3f493fedfedb0bf62d368eb603cc35f31cdd8061452d2f135b1c42bca1e7aadab9346535cc34820eaffccded88d380f630e87a385d2cd05f6a6d11155626d65309e350919bd76c58bb068e7d2849fc995bd4f99f269df563bdef110689fcb73b5489acc25a55a1ee61aaffbc68d645ebbe76bbb339ce2b4ead920e7492687223e121943bcc605b988854d74f153925c1a86f733395e3a5761d4cc14a5b4c3c4894ec8601a280923e5c1df786fd0e6695f8e3d05babac07b4a9dc765429996a1e3f5d83c6f7f159d46fae4b3f896f60b8db2696e80a41be4375f3e043e8dae6ba12c42df6c0dc3b5f88562860c2f95a069a3a42c1aeb278d9134baffe810bbc78783db21a5df3a47c66dbd2a32b1835e18e7fa094e3e9b1df233c0a67f69abaf2fc3c4edb3be6ccc9a389e683ddcdbbad50d111a78fcccae2be0fa91a0c13bfb1c31da58f36ebcd115d995d537e2bed453712a072dd3da46076c3fc55dea4202ced6ba9e919e89fd4b51c577a696e268d3f21972713bb48c7729961a03d992f46d6d6915725ff7e26e9e4fab2f62034b78083a57f1c3579bbfdcc4f6af280d66d5d6aabf307e6761d3f1dea812d685ce3f0379d2b28f2642c89bfb65a3aa9a182afa4eb8cd0fe1347913136062248b48176f36cd1219c79a41b5ab1fdb2cbda042cf90ebc9091320eedd4d62274b7ddd782a4e1e684ec52d8e64c28c9b506020e4f8da709a43c4b844132057d760e7bc6182632edebe130eb74b0f9f991ccd31f9c7298f61ff3839eda2700460d951f0f61e60a53eac6bd9b063b6b5ad62ea8df4d9bc28ede44079fc05331900d92521b66fad280297868f25c433364108b062c9e66f0af5dd923d1a70589f01214974cfa6dccef1638fbfae107d8f9621438efb19457636b95c9f8c43086fa73ce9f602f410eee73f64ee893fafa40e9dc834e9ae1254156789e24b27c3977b4ff2a22325709c2910d4a23fc4014748de4a3a17dacf9e780dae0c5d7896c2f2070856ff96b68154b0c3cb0e99fb5c87ea47c95b31b3f29317d24f208f2a9d736e88d7263a02c949046175f4baf2f216eb10062b408b68467272aaee6edc315d82babfae22fe952b5bbf0e550c7862f16e02cbb139bed3adf45b59099cff073690275be46336a9347de46f992ca6af910f44f31c38fecdb20162635e13e9c3e5420353319906d6141572d2adb7041c2abca0ada5929153083cdf4cfce2ef65e7c466c94ac3f0be4890fa8570da16d809add0783794948f8c5e2f2af74d78ba6c71db199b0d34bd720367878087d5a830e3370527dc4d045da4117ac71e15e786cc711ba614b53f27f0ae914f8bec2181be51c078ddc4013ab20e20f4043ca7dd2a471d2c304d41da2d992536f4929a9b85fb76c368ab28e14c9332695d452abf8b35bfd29689a4b6ebb3912be486d9c580d45eaed1f93348b0653566d36304c89bb9500aa4133df86cb43a45e9d37fdbf79ae5b9fcdacba50c8f3822686cdb867cb6193ae707d1ec758f9d0fb5bbda34f3306a2a744e00b3479ed34ce68ecefb0eecbd1e6a57661c782ef0c720a085134563e84c0c09a01ad8cdb6e5cd0fdc7d1178023008c170121b4b97970b828981b5f66091735352be81cae827e1df76b15b9dc697983ad23cf737e08dae03261d56fed0f3583621a2b37c648cb3a0d5825605ed75d5054f9ce333363ffa5456f0372f3a02161fab1db92dc801a82bee42ca32206755abb565ca72bd307194d3c821b9433672a684fb36cc26693e633ad6847bfe6ad3579367453b1c71190153c787c01f6de4ea9e0c3fceffb8ef7c0128b723f8841f6d22431c53a5f9671babe312d6d02ada438b4aa67911b2dcabc687e44d997b6f7e2f7c69d79ed21dc5f4c5cd45124beed99be9bec4af2d39522f49bdcb57a42d3e980514bc938e3ed9a5b90b1517fda9d39ed98e231c5ea452fd07cd04110a4aa134fcd9e622c25e30004a7fdd293ceedc6f646d7555339713b819a910dbc3c71d87d0a2f16414cd917085f64ebaff9565ecd39e5b96f37772e86820aa3069f92e4a371485291c91cfca922204aa8006280d8c7b2f2f192e603c1b560079fef3d4683c183e9ea31880349b13436ab5fbe4381494f46a0ba92c0044a43a54506b30198762bd4cad3ee7941e0e89a3dab8d7b43779c0033a8700882039a366332324118ebbd01d8aa510fdc079779bd54820a7d5523c48aa360ff8d62a2f0301781b1db8e4ccaf054577474b835a100226985f7b109b41fb1748847ffb8d17a8d4928f869c50f094b31217b01d1b79289e6087496b492367f143a241725b20bc11e6cb0b8dc8690632242ef4a1b3be0ee41646408b11098b2f3ab77d0199171143c0c8e4f40b840aee7147ac4a143b4f12c8d1cf6e753d4aa39b8c7f72b36d2457fc8165028f23b793fc852ecb08f63c729a482204cb6bf72b6d4ddc0a2534b341763a28d812c73b9bb7e2f112b791ed514592e906006680828e329038dadb02efcd21304c7582180ecf495743742dad868dd2cc03c74a004d1469eb23fcff78e00873976baffffd8fddf1bf4f73a67c53cf42cbbc84d1c5b69353c7f39adff181fd8572470f6db93e09d719906d6675a7fc1653850a36ee69804ecbc682c5e459baffa5b72c0d5afd6a100c3f1afbfc93739fcf549b09df10b53bced3159f9995c0a4a39c10438a829d27b4174386faff9d3172849f7b45b2f8ab13423b2e2e8d1393af1829e3275123ff84c313e406eadea987a8a338be5c1ebb0477a1b9688eabcde58b02037c234854979589b116f7f5d50f881eeec70990045332dd1341dda7962209278ec9272cb7ccb93461238fb0dba89e2d455e4e53d18b02ed7b590bd91635da6a153411f31428dff2da7067dca1bf8be268f98af7386a0173dd26dbd1c4e7522de3dbcf18a68cefcd7c05a0ed95efc79bc82d5ecbf847c0c9729951bb0b5a0a5b27e946ea2e660b5d4fdad5b9121a67b11a17e53f4d7c54e5bed2a5c1837911d2b775d6fe9e5c55695c7ebc0ef17865ba67945b858a49afa54e1f21a4015a9f7226aff00d75b4466febe8b93d96f6e0e4ba7a997b7452e41a44fe151d56153f34a5c0bdfa432f6e533e55c6ec8fa34b5a25fa6fd5a3fb12dbbcb9987a6546d89838ecd073ced920f1c957c915f4382faf69f5bfc58ac7f3b546c2fdc30063d8f12520ec3785a606f1ecf75824e8213313b3bd03dea9b965d145a5e35794cfb4223834d096001b9f3d3c8e21dca885ab18b5b9cf9e7386dc4c17316de941a34faf99fcf610250473f8af50c024f3c9b3bd240e491df4b1b12380bd7cdb166d018fd664e540bd0aff51b6c4dfe4a5115b70dba978787b6740e6603fa8f6e95e90e9ca29e62f9691f08192455f788d86405cd2058940e9c15854e13d862fa65c2864b8f6714c45dabd5622a2ef636fbede7138dc4243d5694e26606ce53fb0dd064e9ef983719504c04b90ecfa2b71db2075220f410cc50ab13337980fc69146d058b5226580e2e2160ed84f2c384ab9e1e17848a20c42a1efc08a5f176eb991487339ec93e77aa20b7ab046602e3584035437d818974ac7e13420790bebd4014b173a04e103636dcd4ad730838ddf3d73ede094528b9b77bc59a6cb39eec23487ae94d902243608108e630f2642f8c9c23d77a28cfb6458e186398df85646fdf041874c3b01e9ade51347106e5884b49b46ed25b8b7cbbff77aaac19df519807c70a4ed9c8da15a5a1a57c81b4ab67540f8e355201f999804cea86d162360e0b42438a21d30ccd88fd55a822a1b1e6df7f09216c26a9406a32ff0745efabe7a19065b7ec771a9e0c79e013526f85a178f20658438d1ede9e97e1d35ad7ea583add8eaf90ddf681b740eb2f3a6013ff60037ec11a8efc99288652ef9f42d92e92b0890685618c08910daa8449dae649a7503edd36708395fbd4f79c563b64475b9a915f4d25cc7b81b208ae7659b8f205b7112aada84ff7648890370abe9d3b7d6acd9b1072064bb6986b06fe12d27f1e3f1a4549f8cec2abe565160d226a6d1bbe85d63da12a16a49cd7e92b2e1787a10a4ff8b2ae5ba4f7e2ab82a67022838d7d37abebbb8d26bfc3409cc9e457ac499312a748c0f137ea7714bc4b15ced0624d9f5da6645230c90b31f68920aec139dd83281bf12e17efc1092d75e418920fdce5577567f74945759f3cf58030c19eaf5b0d4f742d9eac727dda92c0f56ea015a494bb3cf62de6b7bc47cae3a05e5e080de7439f6a0c170564b38234c5d675bb92e5e5eeec986e8ab071d5d64ec715b63e4d3ab2c810faf70478e844d8c6be814fc7145fd0cf9ab4d3c74f1d59264eadcb85601986678ec52b899adf7e15f781094772abc67158420d92fa8f5a3b5994ef47cbd4ac2537cf3e6c8dd9abe70651ddd383c192ef7a46e9db18e08aba925f2c076fb25da839f6a47897e87e2c4924aa9e18f8e528799565a3cb747409c25b867cd4a57308fc4a30042bb607902732e0b2c99c218240c0a817207aa26b0439c7c82d5ca9d0593ca4118bfd907dd5425246e82a8bfc79143200130e2f62566ebf30d2f223e6c0f021b90c57284898a8fe34c61999d33051ef0f9f3e38497e3e5b06a6a4d6867ac13e9daa00e1bb90a1822fba506cf2f97cbd8765442ba5558edcff0c8f3f46cb6d81f65181bde0677b6e2ac44550d48aeb0a66d86de641c8b4d98354232e6f678c883e9f296583f3dd5d5c5356ab3da879f465e9aedeee29765223d66f34ff07ab31ace5d3adfcebd29b64b947ed4d22e243883764234347352f145407579ec471d340167d37d64523ae792d2c2def5a32a51ac250da73d36a4f583668e049b119dc605258bfe1648ff6a6feeae1399167512e170e2525cf31883aab885ecd77a5d6a5399ae7be298a1ff57947635e7d3115cf3f93854178153b04f533cf83ef1496e8804581acef8e1a9afc5018e3ba118cebad63f361ebab4036f5c751745a550e3a156e1e9a970d8bf17af8e5af81acc7c7ce58c22b8923c99e10e8785cc402aa336b7dd62b824ad6526703d874cc6a9a878692434c9fb278adaef1d40d4708b5ad37dddc96576d5994c04a51152723c453124f77c39c01b4a0fbcd52b2430d2d769abf854499cc5c3802b307a379b81d077324aac3a32a2fd6277168e834375b3bcd002ad1d4970c336424c6f2439839226d6f93868400b90e82b383bcb485bc3ffa4076d1f4eca1b1f40cda389bcebcd6efbc84097653d7b28bab0028f8dfc3df07c2f52b779d150bfc4e77c9046180ff95c4457a1d45917fb7c6ef9d5511a9bdb7adbfce6622a353fdda6c492944c8525cf44f53f8660aff306f69153dea15a891a4f42", @generic="e09d317599244f26c3ea4c7c912d45ed5a95e14c93edc35ce43b56ec6976ddb7ab1b8ace4e160f602bd319ae02c9a317bb9449aea9964fe23a6deaedadbe58df74ec738c5145f360844eb70174ad4a274004996c0cbe655b17e5403fb18651e217f0158c05c3ef09492cac664ead376bb68b73209d3010bbe7e892105024f1154f41b8855e3c34eae33a9b351e396be2a506692943e7edbc6c84bd2f39753d16d1c552de13c26a8eba5eec92e90485700782138fbd1e3cd7b92ba8da97fec11b890fa78e8330", @generic="b433b164c60a6b1690343dd3c4ae7b1976cdd9a9aadbbceceabd5a649dffa3c6c0e82219328b57ae9bcde241d62f5a52abb0ce5b3d3ef1d09da21a8fa7c8f183cb6c6cac35c2cf7099221d4d1482ba7a5c99c85e2acf4544ef0c173467fe1f4fdd73aa03ebca8e06fe58830c40607ee82f2c337cfbab4cc78196d7ea4baf1d9c", @generic="0b68735c4ed1618bd2f796d602da2fa0abe5860a3eef93f365278ae1d8fc7262f8", @typed={0x8, 0x62, 0x0, 0x0, @u32=0xf8}, @generic="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", @generic="f3c7b168a6186659af0dd9c18a1631dbd57291bb4714261e3eba86332bc06863cbb13e4d2f4cdd74618b12e6bd4f09c817b838e0113c182fd02ec0b9dca7793a1aa141f24cde6ea4cca4ee13f280", @typed={0xe5, 0x19, 0x0, 0x0, @binary="fcc57906dfef003686847147b189a11c86d51a398fdcd40a82208c4fc9b3c55e1faa7a7f008731f7f536bb903ab22190fdb15ac7d90529897e268fa8d57b2871270aef28db04cac019d1d55de125ba15b05e852e911da3c37254635d0f450881af4a9b44ef6fd1fe1cc1a3ed29485ae3edd3a31cbcc59a9bc7e6f345fcdf915486ce5eb2f42cf8e2e806cff3b970d414230c258e279eec1c9e940e32dc97b55a16b6eb9d3617d0ac38718de048d34d91d9ecc8a364026d5fd1000712e68f47928c2b08840e5197c7b2bfbe40d9e324d43f4923f9907992c9ef9da8d42331270c15"}]}, @nested={0x334, 0x1a, 0x0, 0x1, [@typed={0x14, 0x7, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="60c0b4979148d703a8d711c482cf2e602fe05338d66ee9b981226b2a3ebe878085fdd5b083b844429887a40a082515cd76f97950d2321878d1d937240fca38db17467f30b523679dc63cd490e75a05f0f62c987bc5637671f67e0cbcfc32778067d561aa9eb0357886f13451b09586f4f7426e9bb0cdb322392f3ba1c333b4030d32e4b542c42c0446ec8eda6c0db84687922373f99b70cfd347322c", @generic="6dbb4c283bc3906d564b80ea6e8577d82eb225f70f7a439e06026b52dea332e7127de7a194f88a47bbb3002e64df4f200eeedd88ab4a819b84c30ca2514d8afad9c49ebec62de5807ecee3fe4379901c7cc39da66232e01822676a9e6df3abefc0b887db8e47ece68e858dada05fe05f7c0ff17cfbabb76615be2f0a3c85ea32f9126d2d8385b3e34b449308287a47869e39bedee7ed9be71471594180b281602f6fb8ecc62e41d7e51dc0ec29a5e32f8c2cd51e94b7ac0564623f42b480e8918b7467734904677ffd4610b89b98d13df9a1f3", @typed={0xe6, 0x2, 0x0, 0x0, @binary="8c7c2ab3d2a84ed25db0d494f614a6ecbd33299ddbb9316a36540f35156ade36ced1175cef0499b3b0202d5876c34a457946c11fa93780cb121da1e6c5dade5676f4f055132157d5278bdaa5880fa43dceaef8712c9d7389dfce8a12b22291d8320915bdd0411c1f95be90e99bc9f039a6986ed2d19b5de33f9735b981355a493d55ed517dee368071f20e2f0e0270610bc1c0bf99c11d8e7e73b98e12bcf2f6a7123ccd3256dfd08ba65fe1289ab517b42196bb4251b4acc0f858b52bf924b9e4421b1881a1d1262679dce3dee6217f7236a256e772540db98cd133099bae4c808f"}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="3bf6592051c3f777a4a8e3a2a6a8dcc70c795beeb00375a403a5db674b2f890bb906dfdec8d47aa9cd91dd9807fd90e4c6fcc5e326c4feafd7b5680f24a79f391572f6c1c6e01b23c947e8b643990fd638766f644b6e365ef0c4ee0af761ba15464c425841dbe1dc266e62a08e25bb19ec1e304a1eb99b3831c9dd8cee6806c2153d7fc4a762e5960d942bcb398b171f2806ad3377ef7ae460f732d487735e610eb134577388a86154914c64493173e7f3"]}, @typed={0x4, 0x2f}]}, 0x26f0}, 0x1, 0x0, 0x0, 0x4040002}, 0x20040804) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/173, &(0x7f0000000240)=0xad) [ 1182.157349][T15665] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1182.229060][T15672] IPVS: length: 173 != 24 13:38:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x741100, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000039008c6b79bc9657d898f432002206000000000000000800000000"], 0x14}}, 0x20000000) 13:38:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000003886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1182.355141][T15683] FAT-fs (loop3): bogus number of reserved sectors [ 1182.363676][T15684] FAT-fs (loop1): bogus logical sector size 549 [ 1182.375394][T15687] tc_dump_action: action bad kind [ 1182.377963][T15683] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1182.388671][T15684] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000000)=""/16) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x64, r5, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x32, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x64}}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$l2tp6(r6, &(0x7f0000000300)={0xa, 0x0, 0x4, @private1, 0x2, 0x3}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0xc080) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x500, 0x0) 13:38:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1182.512542][T15684] FAT-fs (loop1): bogus logical sector size 549 [ 1182.522382][T15683] FAT-fs (loop3): bogus number of reserved sectors [ 1182.528905][T15683] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1182.531358][T15684] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 1182.639759][T15708] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1182.651557][T15708] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:38:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xe0a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x60, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004c86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x4000001) r1 = dup(0xffffffffffffffff) write$ppp(r1, &(0x7f0000000080)="ccb1ea6ac6fa76d73805f0697eb1bc9e2de860f70e22126f000466b207364dc45d304736c9f1dff7bc5a523b261e50270640ea702da518fd039870d585ce41bc93742fd6543c134d89a2d1b20e07a82294efac8a44c8cf80cf0095910a3d3728554ffc7c3d7737422dcaf5b190def7057693c4bd25c1e7fcac3758b65a", 0x7d) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 13:38:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x1, &(0x7f0000000080)=[{&(0x7f00000008c0)="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", 0x1000, 0x1}], 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='part=0x0000000000000007Leid=', @ANYRESHEX=r1, @ANYBLOB=',euid=', @ANYRESDEC=r3, @ANYBLOB=',appraise,defcontext=system_u,context=root,permit_directio,uid>', @ANYRESDEC=r5, @ANYBLOB=',\x00']) r6 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r6, 0x0) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000500)={0x6, 0x0, [], {0x0, @bt={0x375c5e62, 0x8564, 0x1, 0x0, 0xf6, 0x7, 0x0, 0x4, 0x42b83b19, 0x9, 0x1ff, 0x4, 0x10000, 0xba6b, 0x1c, 0x27, {0x8, 0xffffffff}, 0x0, 0x20}}}) r7 = memfd_create(&(0x7f0000000440)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xc6\x8a\x13)H\xd5\xe7\xa43\xc04\xeax\xec\xf4\x1d\x92\xcb\x0f\xb8X\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xa6#\xeeO-\xbd\xa9\x9aC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4', 0x3) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BLKFRASET(r9, 0x1264, &(0x7f0000000140)=0x6) ioctl$LOOP_SET_FD(r0, 0x4c00, r7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1182.853096][T15716] FAT-fs (loop1): bogus logical sector size 549 [ 1182.897799][T15720] tc_dump_action: action bad kind [ 1182.902029][T15716] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:00 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006086dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x68, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1183.043528][T15716] FAT-fs (loop1): bogus logical sector size 549 [ 1183.051035][T15734] tc_dump_action: action bad kind [ 1183.059572][T15716] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x6c, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:38:01 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006886dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1183.084329][T15726] FAT-fs (loop3): bogus number of reserved sectors [ 1183.096055][T15726] FAT-fs (loop3): Can't find a valid FAT filesystem 13:38:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="3d00000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1183.162190][ T7892] usb 3-1: new high-speed USB device number 10 using dummy_hcd 13:38:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0xf0a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x74, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1183.231173][T15743] tc_dump_action: action bad kind 13:38:01 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000006c86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1183.256714][T15741] net_ratelimit: 30 callbacks suppressed [ 1183.256725][T15741] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1183.273330][T15745] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1183.385035][T15754] FAT-fs (loop3): bogus number of reserved sectors [ 1183.392029][T15754] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1183.418064][T15755] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101400, 0x0) write$qrtrtun(r2, &(0x7f0000000040)="6c4e05ce258631e0c91ca3e971b49e9d93f17ca0f6f12aea8ef407ee415e2a29ac4b035ac17d21abc0b2e3490d2fe34efeba9edeaccd8dcae860f865733c0328fe80c007f537ef70b6cbdece2779c38afae6fcd0e8843762926e53f8a6ceafe9aaf3d8d6726f8df55389aee5e1bf44b813f3c65ff9b13d3e5279d2cb80adfde6275071dc45c6a6977ddf39340aa67069540fd1803dfb7091d0af20938155e6b938287b57534eae8d4429008147c9689d1eecaa1fad25b03e8f112efd639fa61fd867df38d13d1bfd8e0de829b347f21f4ca259e06c8aac74fb247cf0062ad0905e56f892813b3dfcfad20ae635", 0xed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 1183.439844][T15758] tc_dump_action: action bad kind [ 1183.455472][T15761] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1183.463045][T15759] FAT-fs (loop1): bogus logical sector size 549 [ 1183.493618][T15754] FAT-fs (loop3): bogus number of reserved sectors [ 1183.500144][T15754] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1183.501548][T15759] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1183.650304][T15759] FAT-fs (loop1): bogus logical sector size 549 [ 1183.657416][T15759] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1183.692223][ T7892] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1183.701261][ T7892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.728223][ T7892] usb 3-1: Product: syz [ 1183.742046][ T7892] usb 3-1: Manufacturer: syz [ 1183.746653][ T7892] usb 3-1: SerialNumber: syz 13:38:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000320061af0000000000000000000000005000040000000000000001006d706c73000000002000028000000000000000000000000000000000000000000000040006d985000c0007000000e661e8e600110c000800"/102], 0x64}}, 0x0) 13:38:03 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000007486dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x7a, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1000000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:38:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0401000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1185.801310][ T7892] usb 3-1: USB disconnect, device number 10 [ 1185.924913][T15801] FAT-fs (loop3): bogus number of reserved sectors [ 1185.932431][T15800] FAT-fs (loop1): bogus logical sector size 549 [ 1185.945682][T15801] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1185.960395][T15800] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x100a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000000)) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)=""/126, &(0x7f0000000100)=0x7e) [ 1186.044673][T15809] tc_dump_action: action bad kind 13:38:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0340000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1186.073344][T15810] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xf0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1186.150560][T15815] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1186.159618][T15816] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1186.178589][T15815] tc_dump_action: action bad kind 13:38:04 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000007a86dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @hci={0x1f, 0x1}, @can={0x1d, r4}, @sco={0x1f, @fixed={[], 0x10}}, 0x3, 0x0, 0x0, 0x0, 0x198, &(0x7f0000000000)='veth0_to_batadv\x00', 0x8, 0x7}) accept4$x25(r1, &(0x7f00000000c0), &(0x7f0000000240)=0x12, 0x800) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000380)) [ 1186.280152][T15820] FAT-fs (loop3): bogus number of reserved sectors 13:38:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="035f000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1186.338415][T15825] FAT-fs (loop1): bogus logical sector size 549 [ 1186.345922][T15825] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:04 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200002, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r7 = dup3(r6, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x10, &(0x7f0000000300)={r8, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x1076, 0x1}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={r9, 0x90}, 0x8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x610, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x811) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 1186.397640][T15820] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1186.575158][T15839] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:38:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0360000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x110a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1186.628964][T15840] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x300, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) [ 1186.722608][T15842] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:04 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000c0dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) r7 = signalfd(r6, &(0x7f0000000680)={[0x2]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)="1d1d5ca476827a5ddd6ba7a8b289867092105120e878f96aac74f208e2aa6ced852d5a49cc708bfcea18dcf7c43d8e1966019336555f3448018c1ae566e2aa8e4d37344097040e9596558bed46a2be3cd2ea87f4cd7c146999d3bb11df776504bd36fcd7d8b759df4e1b7f8568d6645bb7068795b3de4d32bb6f4fbcd29c7664160fe882ccebced3265870d266a2c1449d640e2e336b3b93877716b60ee2c8fdfbc87e9b8f54c72880f132c9b065efc36f689b922c9333193ec558d0f8117bb74a", 0xc1}, {&(0x7f0000000340)="5ac0fa32ab3e0cfda9dfdb4409c2c7bd678df02e33a4456e5f9216209d391454fd23", 0x22}, {&(0x7f0000000440)="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", 0xfd}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="000000001c0000ac7d6f6c0000000000f5fe000001000020", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x20000000}, 0x20044001) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x800) prctl$PR_GET_SECUREBITS(0x1b) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x3c2, 0x4) [ 1186.825422][T15846] FAT-fs (loop1): bogus logical sector size 549 [ 1186.831696][T15846] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1186.838021][T15852] tc_dump_action: action bad kind [ 1186.878654][T15856] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1186.898298][T15854] FAT-fs (loop3): bogus number of reserved sectors [ 1186.916057][T15846] FAT-fs (loop1): bogus logical sector size 549 13:38:04 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000005dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x500, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1186.919309][T15856] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1186.934274][T15846] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1186.935497][T15854] FAT-fs (loop3): Can't find a valid FAT filesystem 13:38:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x64}, 0x1, 0x0, 0x0, 0x24044895}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) 13:38:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0361000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:05 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000046dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1187.182144][T15854] FAT-fs (loop3): bogus number of reserved sectors 13:38:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x600, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1187.236108][T15854] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1187.246838][T15888] tc_dump_action: action bad kind 13:38:05 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000c0dd6040177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1187.394093][T15890] FAT-fs (loop1): bogus logical sector size 549 [ 1187.502257][T15890] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x120a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x40002000}) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000080)={0xc7, 0xf70d, [0x3, 0x3, 0x4, 0x22], 0x300}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x210100) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000380)) 13:38:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x612, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1187.615934][T15890] FAT-fs (loop1): bogus logical sector size 549 [ 1187.628307][T15890] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0270000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x400) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 13:38:05 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6840177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x700, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1187.876225][T15913] tc_dump_action: action bad kind [ 1187.881545][T15912] FAT-fs (loop3): bogus number of reserved sectors [ 1187.894514][T15912] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1188.029281][T15917] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1188.039489][T15918] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1188.109574][T15912] FAT-fs (loop3): bogus number of reserved sectors [ 1188.147850][T15926] tc_dump_action: action bad kind 13:38:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x900, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1188.168626][T15912] FAT-fs (loop3): Can't find a valid FAT filesystem 13:38:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1188.229078][T15925] FAT-fs (loop1): bogus logical sector size 549 [ 1188.244142][T15925] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1304000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1188.358419][T15932] tc_dump_action: action bad kind [ 1188.379820][T15925] FAT-fs (loop1): bogus logical sector size 549 [ 1188.395598][T15925] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x6, 0x2, 0x0, '\'!'}}, 0x23) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1188.434085][T15935] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xa00, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1188.504897][T15941] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1188.540361][T15944] FAT-fs (loop3): bogus number of reserved sectors 13:38:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0280000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) [ 1188.569883][T15944] FAT-fs (loop3): Can't find a valid FAT filesystem 13:38:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x14, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000015004000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, &(0x7f0000000340), &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, [], r6, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x11, 0x1ac, 0x101}, 0x10, r9}, 0x78) accept(r3, &(0x7f0000000280)=@caif=@dgm, &(0x7f0000000300)=0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x618}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8000}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x33, 0xac, "79229692c1f1283df85c26484aeaec4c2296087342f829db6eaaa25899b4c7b0c2b38753873c0119498111e2c22dac"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x20010004) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000240)) 13:38:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604f177a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x130a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xb00, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1188.897529][T15959] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:38:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0380000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1188.975529][T15960] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 [ 1189.014275][T15962] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:07 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x32, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x2, 0x4, 0x0, 0x800, 0x5, 0x7, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000000)) [ 1189.098717][T15966] tc_dump_action: action bad kind 13:38:07 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040307a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1189.187184][T15970] FAT-fs (loop3): bogus number of reserved sectors [ 1189.198913][T15972] FAT-fs (loop1): bogus logical sector size 549 13:38:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xc00, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1189.231444][T15972] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1189.261884][T15970] FAT-fs (loop3): Can't find a valid FAT filesystem 13:38:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1189.364628][T15981] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x64}}, 0x4008000) 13:38:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="02c0000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1404000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1189.440812][T15983] tc_dump_action: action bad kind [ 1189.460155][T15985] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:07 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60404f7a00102100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xe00, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1189.598948][T15992] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1189.711192][T15991] FAT-fs (loop3): bogus number of reserved sectors [ 1189.757495][T15992] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1189.788391][T15992] tc_dump_action: action bad kind [ 1189.829107][T15991] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1189.854506][T15998] FAT-fs (loop1): bogus logical sector size 549 [ 1189.872311][T16003] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000380)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000240)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) 13:38:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000320061af000000000000000000003963c9df0000500001004c000100140001006d706c7300000000200002801c000200000000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x64}}, 0x0) [ 1189.934840][T16006] dccp_invalid_packet: P.CsCov 2 exceeds packet length 16 13:38:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xec0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00032100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1189.984713][T15998] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:08 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af000000000000000000000000500001004c000100140001006d706c500000000020000ed8ffff020000000000000000000000008000000000000000a180916c006da8f4000c00070000000000000000000c0008000000000000000000"], 0x64}}, 0x0) [ 1190.076689][T16015] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1190.086251][T16015] tc_dump_action: action bad kind [ 1190.091814][T15991] FAT-fs (loop3): bogus number of reserved sectors 13:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0xf00, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1190.131518][T16020] tc_dump_action: action bad kind [ 1190.136860][T15998] FAT-fs (loop1): bogus logical sector size 549 [ 1190.154670][T15998] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1190.165756][T16018] dccp_invalid_packet: pskb_may_pull failed [ 1190.167424][T15991] FAT-fs (loop3): Can't find a valid FAT filesystem 13:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x1072, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1190.192427][T16021] dccp_invalid_packet: pskb_may_pull failed [ 1190.206581][T16023] tc_dump_action: action bad kind 13:38:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "da4d"}, 0x3, 0x2) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) [ 1190.278302][T16025] tc_dump_action: action bad kind 13:38:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="03c0000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x140a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x1100, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00052100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x0, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x3, 0x8, 0x1, {0x1, @pix={0x1, 0xfffffffe, 0x30314247, 0x6, 0x8001, 0x80000001, 0xb, 0x8, 0x1, 0x2}}, 0x8}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x404000, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = dup3(r4, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x10, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e22, 0xfffff800, @mcast2, 0x200}}, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={r6, 0x3, 0xffffffff, 0x5}, &(0x7f0000000380)=0x10) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x140, 0x0) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000500)={0x30, 0x4, 0xff}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000320061af0012fb6e9f2fcaaa8b2066f74d0fe400000000000000000000006c7300000000200005801c000200000000000000000000000000000000000000000000000000040006000c000700000000000000"], 0x64}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EVIOCGSW(r9, 0x8040451b, &(0x7f0000000180)=""/181) [ 1190.433014][T16032] tc_dump_action: action bad kind 13:38:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00062100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x1200, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1190.530390][T16035] FAT-fs (loop3): bogus number of reserved sectors [ 1190.579317][T16035] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1190.633967][T16050] tc_dump_action: action bad kind 13:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x1206, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00072100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) 13:38:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x10005, 0x31b501) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x1d) tkill(r3, 0x15) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0xee, 0x7f, {r3}, {r5}, 0x3ff, 0x7}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) prctl$PR_GET_FP_MODE(0x2e) [ 1190.733065][T16049] FAT-fs (loop1): bogus logical sector size 549 [ 1190.758349][T16049] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1190.766065][T16054] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 13:38:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x1504000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) 13:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x1300, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1190.801390][T16054] tc_dump_action: action bad kind [ 1190.807599][T16057] tc_dump_action: action bad kind [ 1190.852253][T16049] FAT-fs (loop1): bogus logical sector size 549 [ 1190.858551][T16049] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1190.887756][T16065] tc_dump_action: action bad kind 13:38:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0fff000900000000666174250204090a0200027400f8", 0x16}], 0x0, 0x0) 13:38:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x137143893ddcaf61, 0x0, 0x2000, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x8, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 13:38:09 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6040177a00092100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000000402907804"], 0x0) [ 1191.015839][T16071] FAT-fs (loop3): bogus number of reserved sectors [ 1191.032886][T16071] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1191.091080][T16071] FAT-fs (loop3): bogus number of reserved sectors [ 1191.098889][T16071] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1191.117643][T16074] tc_dump_action: action bad kind 13:38:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17, 0x150a000000000000}], 0x0, &(0x7f00000000c0)={[{@fat=@nfs='nfs'}]}) [ 1191.217588][T16082] FAT-fs (loop1): bogus logical sector size 549 [ 1191.235113][T16082] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1191.310318][T16082] FAT-fs (loop1): bogus logical sector size 549 [ 1191.320944][T16082] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1191.325506][T16086] FAT-fs (loop3): bogus number of reserved sectors [ 1191.335992][T16086] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1191.431420][T16086] FAT-fs (loop3): bogus number of reserved sectors [ 1191.449918][T16086] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1191.513055][T16093] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1191.555316][T16093] tc_dump_action: action bad kind [ 1205.445890][T16597] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1205.480634][T16597] CPU: 0 PID: 16597 Comm: systemd-udevd Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 1205.490433][T16597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.500492][T16597] Call Trace: [ 1205.503782][T16597] dump_stack+0x18f/0x20d [ 1205.508113][T16597] dump_header+0x106/0x60f [ 1205.512531][T16597] out_of_memory.cold+0xf/0x182 [ 1205.517383][T16597] ? oom_killer_disable+0x270/0x270 [ 1205.522585][T16597] ? mutex_trylock+0x246/0x2c0 [ 1205.527349][T16597] ? __alloc_pages_nodemask+0x107b/0x2a20 [ 1205.533072][T16597] __alloc_pages_nodemask+0x24a5/0x2a20 [ 1205.538625][T16597] ? find_held_lock+0x1/0x110 [ 1205.543300][T16597] ? warn_alloc+0x120/0x120 [ 1205.547809][T16597] ? xas_load+0x66/0x140 [ 1205.552061][T16597] ? __lock_page_or_retry+0x650/0x650 [ 1205.557434][T16597] alloc_pages_current+0x187/0x280 [ 1205.562562][T16597] __page_cache_alloc+0x31e/0x450 [ 1205.567588][T16597] pagecache_get_page+0x2a6/0xf70 [ 1205.572614][T16597] ? __do_page_cache_readahead+0xc2/0xf0 [ 1205.578246][T16597] filemap_fault+0x1a94/0x2ab0 [ 1205.583014][T16597] ext4_filemap_fault+0x87/0xb6 [ 1205.587861][T16597] __do_fault+0x10d/0x4d0 [ 1205.592191][T16597] handle_mm_fault+0x349f/0x45e0 [ 1205.597131][T16597] ? apply_to_existing_page_range+0x40/0x40 [ 1205.603040][T16597] do_user_addr_fault+0x598/0xbf0 [ 1205.608069][T16597] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1205.613620][T16597] exc_page_fault+0xab/0x170 [ 1205.618208][T16597] ? asm_exc_page_fault+0x8/0x30 [ 1205.623144][T16597] asm_exc_page_fault+0x1e/0x30 [ 1205.627990][T16597] RIP: 0033:0x7f3202c58580 [ 1205.632389][T16597] Code: Bad RIP value. [ 1205.636447][T16597] RSP: 002b:00007ffd70b0dab8 EFLAGS: 00010206 [ 1205.642503][T16597] RAX: 000000000000000f RBX: 000055a45d163fd0 RCX: 0000000000000000 [ 1205.650466][T16597] RDX: 0000000000000180 RSI: 00000000000800c2 RDI: 0000000000000012 [ 1205.658433][T16597] RBP: 000000000000000f R08: 000000000000f800 R09: 0000000000000030 [ 1205.666396][T16597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd70b0db50 [ 1205.674378][T16597] R13: 00007ffd70b0db48 R14: 0000000000000012 R15: 000000000000000e [ 1205.719740][T16597] Mem-Info: [ 1205.742055][T16597] active_anon:200609 inactive_anon:4149 isolated_anon:0 [ 1205.742055][T16597] active_file:0 inactive_file:2 isolated_file:0 [ 1205.742055][T16597] unevictable:0 dirty:0 writeback:0 [ 1205.742055][T16597] slab_reclaimable:21697 slab_unreclaimable:96788 [ 1205.742055][T16597] mapped:53733 shmem:4364 pagetables:4489 bounce:0 [ 1205.742055][T16597] free:25362 free_pcp:96 free_cma:0 [ 1205.788434][T16597] Node 0 active_anon:802420kB inactive_anon:16576kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214932kB dirty:0kB writeback:0kB shmem:17436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 614400kB writeback_tmp:0kB kernel_stack:12640kB all_unreclaimable? yes [ 1205.830255][T16597] Node 1 active_anon:16kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:32kB all_unreclaimable? yes [ 1205.871023][T16597] Node 0 DMA free:10252kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1205.907160][T16597] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1205.920110][T16597] Node 0 DMA32 free:37056kB min:37964kB low:46940kB high:55916kB reserved_highatomic:0KB active_anon:802420kB inactive_anon:16576kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2578208kB mlocked:0kB pagetables:17956kB bounce:0kB free_pcp:136kB local_pcp:60kB free_cma:0kB [ 1205.968685][T16597] lowmem_reserve[]: 0 0 0 0 0 [ 1205.992165][T16597] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1206.022317][T16597] lowmem_reserve[]: 0 0 0 0 0 [ 1206.027039][T16597] Node 1 Normal free:53724kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:16kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1206.073547][T16597] lowmem_reserve[]: 0 0 0 0 0 [ 1206.078258][T16597] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10252kB [ 1206.096827][T16597] Node 0 DMA32: 2140*4kB (UME) 776*8kB (UME) 239*16kB (UME) 128*32kB (UME) 84*64kB (UM) 38*128kB (UM) 13*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36256kB [ 1206.119525][T16597] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1206.130991][T16597] Node 1 Normal: 7*4kB (UME) 2*8kB (UE) 7*16kB (UME) 2*32kB (M) 4*64kB (ME) 2*128kB (ME) 1*256kB (U) 1*512kB (U) 3*1024kB (UME) 2*2048kB (ME) 11*4096kB (M) = 53724kB [ 1206.147629][T16597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1206.157280][T16597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1206.166715][T16597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1206.176318][T16597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1206.186517][T16597] 4366 total pagecache pages [ 1206.191139][T16597] 0 pages in swap cache [ 1206.195345][T16597] Swap cache stats: add 0, delete 0, find 0/0 [ 1206.201402][T16597] Free swap = 0kB [ 1206.205254][T16597] Total swap = 0kB [ 1206.208987][T16597] 1965979 pages RAM [ 1206.219158][T16597] 0 pages HighMem/MovableOnly [ 1206.225749][T16597] 349900 pages reserved [ 1206.229903][T16597] 0 pages cma reserved [ 1206.234003][T16597] Out of memory and no killable processes...