000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 788.960949][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 788.961083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 788.966923][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 788.972906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 788.993486][T27503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 789.104701][T27505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:15:19 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91f"], 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 789.213639][T27509] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:15:19 executing program 0: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb"], 0x8) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 789.281367][T27505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 789.377062][T27503] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:15:19 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 789.458421][T27505] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:15:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="f6da20fc1000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @identifier="4aa3b16db2ecca9ea07c8b551e5b23ee"}}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x3ff, 0xfffffffffffffd41, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ce7264f3ff122081059e3b680dea6e137ae667000000000000"]) 19:15:19 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:20 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:20 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:20 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:20 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91f"], 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 790.400966][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 790.406780][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:15:20 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:21 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:21 executing program 1: 19:15:21 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 791.289384][ T27] audit: type=1804 audit(1578942921.367:322): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir200237233/syzkaller.xzJhLZ/632/file0" dev="sda1" ino=17236 res=1 19:15:21 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x208040, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "e8784650e577b8c9", "20c03c9c22a0b49115c4b947ef13e499", 'oi\"e', "b564d3b892d9a4bc"}, 0x28) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", ""]}, 0x139}, 0x1, 0x0, 0x0, 0xa467ffa48ece314e}, 0x4000001) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=0x8, 0x4) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 19:15:21 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91f"], 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:21 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:21 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 791.647394][T27589] FAT-fs (loop1): bogus number of reserved sectors [ 791.675856][T27589] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 791.685131][T27589] FAT-fs (loop1): Can't find a valid FAT filesystem [ 791.796866][T27598] FAT-fs (loop1): bogus number of reserved sectors [ 791.848295][T27598] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 791.999909][T27598] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:22 executing program 0: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2020000, &(0x7f00000000c0)=ANY=[]) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x800, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "ebe43678c00f7deb", "3acd2528529e97d43da648a82516368a", "bf726cb7", "6924db601740b269"}, 0x28) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000240)={0xc, 0x0, {0x0, 0x1ff, 0x1, {0x6, 0x20}, {0x80, 0x6}, @period={0x2c, 0x7, 0x1ff, 0x45, 0x4, {0x800, 0x3, 0x4, 0x2de}, 0x3, &(0x7f0000000200)=[0x7fff, 0xfffd, 0x4]}}, {0x56, 0x400, 0x20, {0x0, 0x3}, {0x9, 0x9}, @cond=[{0x9, 0x7fff, 0x2, 0x9, 0x2, 0x800}, {0xb308, 0x6, 0xfff9, 0x8001, 0x2, 0x401}]}}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x8, 0x1, 0x4a, 0x0, 0x0, 0x6ae, 0xc0801, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc2f3, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x100, 0x0, 0x8, 0x2, 0x6, 0x20, 0x7}, r1, 0x9, r4, 0x2) keyctl$invalidate(0x15, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xdd) 19:15:22 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:22 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:22 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe969"], 0xe) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:23 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:23 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') 19:15:23 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:23 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2000002, &(0x7f0000000100)=ANY=[@ANYBLOB="00d3f3e8e849535687e2b1d217c0354e68a108001be4a49935fba612dcf87124b04f88d90eb91f5dec591d953450e63f6987bf72152446bd43408c07469a07a320c1731b019d78c640c8679871ce3c7e6c80467f7eca669a6ca0b707f48cb4121781d105c20bac6cdce7a87c5f24a8e10861dc151f24d036b4efd6c800"/138]) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) 19:15:23 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 793.591100][T27671] FAT-fs (loop1): bogus number of reserved sectors [ 793.600937][ C1] net_ratelimit: 13 callbacks suppressed [ 793.600946][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 793.612401][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 793.618375][T27671] FAT-fs (loop1): Can't find a valid FAT filesystem [ 793.686857][T27671] FAT-fs (loop1): bogus number of reserved sectors [ 793.711015][T27671] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX]) 19:15:24 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe969"], 0xe) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:24 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 794.226887][T27690] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value 19:15:24 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 794.300727][T27690] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value 19:15:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2000002, &(0x7f0000000100)=ANY=[@ANYBLOB="00d3f3e8e849535687e2b1d217c0354e68a108001be4a49935fba612dcf87124b04f88d90eb91f5dec591d953450e63f6987bf72152446bd43408c07469a07a320c1731b019d78c640c8679871ce3c7e6c80467f7eca669a6ca0b707f48cb4121781d105c20bac6cdce7a87c5f24a8e10861dc151f24d036b4efd6c800"/138]) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) 19:15:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="64da0c00000000000024a255be"]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001540)={0x1, 0x28, &(0x7f0000001500)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001580)={r0, 0x9, 0x10}, 0xc) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffd, 0x5, &(0x7f0000000300)=[{&(0x7f0000000100)="bb78985b5a2ca211ed3074202ad232293dcc3904322675c122c1505b2565dc1cd9645e0ee5202bfa77420085872b18fea7c47132cc58411221dff567cb8edd89cf17ead6ac27ef5c6169aa00c8da138ee9e68fd5c6bd2230245766b15c0fa61cc62483b0cab41720e023c9494f27b96499211b73af1e663b68d680ed378fe85307cc46ab20505059039d19cb98d016444a61175d8cc0af5170a19eb7d45d68677d5305674f224d1b85b344dad50e562075cbbb35bb784c4886ed47d87aa7b5fc08dc691fccb8f8", 0xc7, 0x7f}, {&(0x7f0000000200)="9b39018802c6fb817e51a56e921ac01d8b9fabfc", 0x14, 0xffff}, {&(0x7f0000000400)="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", 0x1000, 0x8}, {&(0x7f0000000240)="c0d45af0a563f86a1de5d51d0432582a12833187ac598ea4af45e175c14781cd4102a12c7dd0061c87085e737a0e0b94eb4526c106788739b45b7a30f90d4949f167d2751e951e49f519a0ccbfe3986ed2de2daf210b9dd71ef4b6881801111eaa693e962337250ef45de6e32f608ad72d158d3d6298df7509f908ff6d85c113230278addff6f1b8ff0d795d815cc5", 0x8f, 0x1}, {&(0x7f0000001400)="519b60106d1388fa58f3847b4fd008ff520d19889246124252040cdbc7f6d41c5bdbb6db8b26b5cb08caa94394efab58a0669ed988ddd995357f1cd8e651385660897e41dedd6fb7e8c53ef6755438927fad1d82e826f86c67e1c0e0316276f512cfc89b7a1cd8ce8e3f122407ca998be1bb011057df17311fb5a9b741f99999611aa958770cac7689109f023e9f4162b7a50f2d660e2cbdd430a903659ab0f6131ce519a21157e059dee514562efa85882aad0cfc6f7f35b663b86bb97811bb8e4a86244933c7d4b61e33aff8881acd", 0xd0, 0xfffffffffffffffc}], 0x5b48fc9de4a759ea, &(0x7f0000000380)='self/+selinuxuser,nodevvboxnet1@\x00') [ 794.493502][ T27] audit: type=1800 audit(1578942924.577:323): pid=27699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17225 res=0 19:15:24 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 794.560947][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 794.566750][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 794.589483][T27708] FAT-fs (loop0): bogus number of reserved sectors [ 794.610983][T27708] FAT-fs (loop0): Can't find a valid FAT filesystem [ 794.722256][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 794.728180][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 794.771189][T27716] FAT-fs (loop1): Unrecognized mount option "dÚ " or missing value 19:15:24 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 794.908060][T27716] FAT-fs (loop1): Unrecognized mount option "dÚ " or missing value 19:15:25 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='msdos\x00'], &(0x7f0000000380)=[&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)=':\x00', &(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='systemproc\x00', &(0x7f0000000300)=':\x00', &(0x7f0000000340)='\x00']) 19:15:25 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe969"], 0xe) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 795.200947][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 795.200954][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 795.200980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 795.206719][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 795.414723][T27742] FAT-fs (loop1): bogus number of reserved sectors [ 795.461367][T27742] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 795.544019][T27742] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:25 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 795.620345][T27742] FAT-fs (loop1): bogus number of reserved sectors [ 795.661347][T27742] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:25 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 795.719802][T27742] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:25 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6457d600000000000038702c00"]) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000140)={0x0, {0x1, 0x8}}) sendto$x25(r0, &(0x7f0000000080)="025e3d0afe1bba1bc75ecaafbe34d4eff05ef1cf381f5fceb21099d7408988c7717ebae53e01a9476796786ef4bad426a5b5d125d63b35f0881fcd6b12994f26e80d7b07ea6f260d97fa62c80b3a9a5cb41e0296d077dc7be760fde7d04488730ad1fb4d17a236eade82772280c58721af9bb0b3efdb70bcb0acbc3be9ba98ce6dc9e2772385a92b34985c41", 0x8c, 0x4c018, 0x0, 0x0) 19:15:26 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 796.312532][T27775] FAT-fs (loop1): Unrecognized mount option "dWÖ" or missing value 19:15:26 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964"], 0xf) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 796.486412][T27775] FAT-fs (loop1): Unrecognized mount option "dWÖ" or missing value 19:15:26 executing program 3: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:26 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000000c0)={0x0, {0x800, 0x6}}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 19:15:27 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:27 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 797.016342][T27801] FAT-fs (loop1): bogus number of reserved sectors [ 797.043505][T27801] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 797.091199][T27801] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:27 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 797.339095][T27813] FAT-fs (loop1): bogus number of reserved sectors [ 797.394156][T27813] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 797.487755][T27813] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:27 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964"], 0xf) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0x3b) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x2a0, 0x0, 0x818, &(0x7f0000000240)=ANY=[@ANYBLOB="736d61636b66736d73646f73002c66736e616d653d2f6465762f6b766d002c646f6e745f6d6561737572652c6f626a5f8d6f6c653d2c00"]) 19:15:28 executing program 0: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:28 executing program 3: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 798.064634][T27838] FAT-fs (loop1): Unrecognized mount option "smackfsmsdos" or missing value 19:15:28 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:28 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 798.382539][T27849] FAT-fs (loop1): Unrecognized mount option "smackfsmsdos" or missing value 19:15:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6406733138ed2ab0bee9fd1c4062aa813c826c7f7070792c00"]) 19:15:28 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964"], 0xf) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 798.720969][ C0] net_ratelimit: 8 callbacks suppressed [ 798.720984][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 798.732395][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 798.846059][T27872] FAT-fs (loop1): Unrecognized mount option "ds18í*°¾éý@bª<‚lppy" or missing value [ 798.880942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 798.886739][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 798.994774][T27872] FAT-fs (loop1): Unrecognized mount option "ds18í*°¾éý@bª<‚lppy" or missing value 19:15:29 executing program 0: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964"], 0xf) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:29 executing program 1: r0 = socket(0x10, 0x0, 0x8) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 19:15:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6406733138ed2ab0bee9fd1c4062aa813c826c7f7070792c00"]) 19:15:29 executing program 5: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:29 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 799.464380][T27894] FAT-fs (loop3): Unrecognized mount option "ds18í*°¾éý@bª<‚lppy" or missing value [ 799.499454][T27898] FAT-fs (loop1): bogus number of reserved sectors [ 799.565544][T27898] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:29 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 799.607794][T27898] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:29 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 799.691587][T27908] FAT-fs (loop1): bogus number of reserved sectors [ 799.757829][T27908] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:29 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 799.906893][T27908] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2b, 0x7, &(0x7f0000001440)=[{&(0x7f0000000100)="61d57077c3340ba674bb4f3ff91edfff95fa2bb08fb9d17f6ac63268f90005f338004aca9200b89844542f6c9de80d564f8f6980d49ad49c005031aaef03b9116b117f71d1a1ad2d98592811e6df390df120328e9d15414984bed15b4f3a", 0x5e, 0x2}, {&(0x7f0000000400)="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", 0x1000, 0x7}, {&(0x7f0000000180)="1f0853", 0x3, 0x3}, {&(0x7f00000001c0)="35b2aade27b97a4da42fbcf619894badddb7cd35d3ccdb04cab6374107d2ff8eba3b4fce955516caf17cb8e25b9c99e22bd2b196a2822c546002f75585d7a74807b9533a9a7dbdfde48d0045d0e9d5d111ab98aadf507d9c9437d70a39a4385f9dca3eda87dfe4ee3a261c2d94313b7c2e191743663fea6d5baf42555a7ce7ecf495229e873a39416d76bfb4a4ee", 0x8e, 0x2}, {&(0x7f0000000280)="19b9f8a6d7e3d4499022eb1e43b60ac4624992968c4f6436b2832ba4b84367ad7807fc5b7ad802ba8ca069bd7a5d8aa50f37f90819f6931c11089808383223236580884a63e3a6be14d72111243c5ddb19d3f369c03558ceff589f7312e136eaef5f9b493d585f6ee3abe2a774993dc58abffb190372f630f1912ceccb8141706302cda1486710a80084d7ea6ec1a3d07fa6f61112c342b744d0290ed2c42fca4ada96ac93eb6373efeffe89bf63cc1de236e2ac1613bd3b981b7bc5bd7704aebf92939f78050a68418875cbd89fcc21e0e0a396ae1ce4162ac700ded90bffbb1916170c4a", 0xe5, 0x401}, {&(0x7f0000000380)="6dd721146fec05", 0x7, 0x1}, {&(0x7f0000001400)="9d6b145479baef92b2bc16174ad5738e59183815b1fabd21bea10bf3f2c10bb4dbbb96d7aa4c08", 0x27, 0x400}], 0x2004002, &(0x7f0000001500)={[{@fmask={'fmask', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp869'}}, {@errors_recover='errors=recover'}, {@disable_sparse_no='disable_sparse=no'}, {@disable_sparse_yes='disable_sparse=yes'}, {@umask={'umask', 0x3d, 0x6}}, {@case_sensitive_yes='case_sensitive=yes'}], [{@appraise_type='appraise_type=imasig'}]}) 19:15:30 executing program 0: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 800.405264][T27936] FAT-fs (loop1): bogus number of reserved sectors 19:15:30 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 800.518330][T27936] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 800.583297][T27936] FAT-fs (loop1): Can't find a valid FAT filesystem [ 800.630494][T27936] FAT-fs (loop1): bogus number of reserved sectors [ 800.642206][T27936] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:30 executing program 5: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 800.673408][T27936] FAT-fs (loop1): Can't find a valid FAT filesystem [ 800.800955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 800.807022][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:15:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f733178666c6f7070a0faf6"]) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) accept4(r0, &(0x7f0000000240)=@alg, &(0x7f00000002c0)=0x80, 0x800) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fanotify_mark(r3, 0xa14136ec20c06726, 0x20, r6, &(0x7f0000000140)='./file0\x00') getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x2ce, @remote, 0xbb}, {0xa, 0x4e21, 0x2, @loopback, 0x2}, 0x78a6, [0x8, 0x401, 0x7, 0x3, 0x9, 0x40, 0x9, 0x7]}, 0x5c) [ 800.971354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 800.977782][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:31 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:31 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 801.226968][T27964] FAT-fs (loop1): Unrecognized mount option "dos1xflopp úö" or missing value [ 801.440941][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 801.440962][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:15:31 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:31 executing program 5: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 801.573089][T27964] FAT-fs (loop1): Unrecognized mount option "dos1xflopp úö" or missing value 19:15:32 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2a11e1e3651235dc0ddf1ab9803b0efa4c626c3002414bdbb953405fc80ec671456c6c7c7fad46a9a651985d92409bfe1c2e7fa36ba2982a86d6b7cbd1dcb372bd4ae0800200ea1c9b850800000000000000e59ae06ed08e4377cb7baca77ea76b7fbd75e018783296fc14a9152898eb66330a2fc515e9394581a0f36edf8246d28ad98c338172af4d6e57d1d122fc09bb134866ccb49cbe423433"]) 19:15:32 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x0, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 802.148604][T28009] FAT-fs (loop1): Unrecognized mount option "*áãe5Ü ß¹€;úLbl0AKÛ¹S@_ÈÆqEll|­F©¦Q˜]’@›þ.£k¢˜*†Ö·ËÑܳr½Jà€" or missing value 19:15:32 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 802.380172][T28009] FAT-fs (loop1): Unrecognized mount option "*áãe5Ü ß¹€;úLbl0AKÛ¹S@_ÈÆqEll|­F©¦Q˜]’@›þ.£k¢˜*†Ö·ËÑܳr½Jà€" or missing value 19:15:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x80, 0x1900) 19:15:32 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 802.905424][T28034] FAT-fs (loop1): bogus number of reserved sectors [ 802.920978][T28034] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:33 executing program 5: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 803.046242][T28034] FAT-fs (loop1): Can't find a valid FAT filesystem [ 803.181835][T28034] FAT-fs (loop1): bogus number of reserved sectors [ 803.214182][T28034] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:33 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:33 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x0, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 803.263781][T28034] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:33 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="64bc3b90500f22c30d"]) 19:15:33 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 803.764393][T28068] FAT-fs (loop1): Unrecognized mount option "d¼;P"à " or missing value [ 803.961534][T28068] FAT-fs (loop1): Unrecognized mount option "d¼;P"à " or missing value [ 804.010954][ C1] net_ratelimit: 9 callbacks suppressed [ 804.010963][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 804.022335][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/57) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646f733178666c6f7070792cb0f1bb5b42192de71fc4fe36af6a00eca66e78400b4e0000000000b80000000000a091b2c9938768ac195fda876d5f4d2d84b6e12620bbae125ebaab9861da74d04b02e62e340600000000000000930f03"]) 19:15:34 executing program 5: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:34 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 804.424130][T28088] FAT-fs (loop1): Unrecognized mount option "°ñ»[B-çÄþ6¯j" or missing value 19:15:34 executing program 0: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 804.516853][T28098] FAT-fs (loop1): Unrecognized mount option "°ñ»[B-çÄþ6¯j" or missing value 19:15:34 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x0, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f733178666c6f70703c27be4c6b8124dd792c00"]) 19:15:34 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 804.881947][T28118] FAT-fs (loop1): Unrecognized mount option "dos1xflopp<'¾Lk$Ýy" or missing value [ 804.961348][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 804.967520][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 805.001675][T28118] FAT-fs (loop1): Unrecognized mount option "dos1xflopp<'¾Lk$Ýy" or missing value [ 805.130957][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 805.136756][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 805.418685][T28134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:15:35 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:35 executing program 5: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 805.592024][T28135] FAT-fs (loop1): bogus number of reserved sectors [ 805.600955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 805.606764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 805.611047][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 805.618874][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 805.696662][T28135] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:35 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 805.766672][T28135] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:35 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 805.901449][T28149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:15:36 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x0, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$dupfd(r4, 0x0, r3) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$can_j1939(r5, &(0x7f00000006c0)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000500)=""/24, 0x18}, {&(0x7f0000000540)=""/133, 0x85}], 0x6, &(0x7f0000000680)=""/53, 0x35}, 0x10000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000080)) [ 806.351070][T28172] FAT-fs (loop1): bogus number of reserved sectors [ 806.402616][T28172] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 806.441054][T28172] FAT-fs (loop1): Can't find a valid FAT filesystem [ 806.600551][T28172] FAT-fs (loop1): bogus number of reserved sectors [ 806.668458][T28172] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 806.706594][T28172] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:36 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x0, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:37 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f3479733519ae7026af2c8c"]) 19:15:37 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:37 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 807.300751][T28208] FAT-fs (loop1): Unrecognized mount option "no4ys5®p&¯" or missing value 19:15:37 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x0, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 807.520410][T28208] FAT-fs (loop1): Unrecognized mount option "no4ys5®p&¯" or missing value 19:15:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$unix(0x1, 0x5, 0x0) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @null, r2}) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4a6f7302ff2f0000000000c08145e6726a1a1715345cccdc24e60feccfb5089126797819c4e6925677a750d7aa521c72c41974248843d97a2a679d92bae1b6d880184c2739eefc17257f096b1f6703ed02426639b06f38c1342a51411d0e8437c3d606fee0f1abf884e4797d637524c3ab1cb34b6fb22f7174a23dbd4915c784c78cd8ce7751621c7a77556de16a72f6f970fc0a5ed840125e68c29a77e05340bddeb7ec94e373d07288a6c2c7504f7d026406f59a7dde99d80e9ac1d51d1ffcf95173f85e6377d03f0f31381def227e"]) timer_create(0x5, &(0x7f0000000240)={0x0, 0x11, 0x0, @thr={&(0x7f0000000400)="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", &(0x7f0000000140)="e4bebcbecf496e2df179c8a6a46c04c7fe531645879022b8"}}, &(0x7f0000000280)=0x0) timer_getoverrun(r3) 19:15:38 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:38 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) [ 807.996214][T28229] FAT-fs (loop1): Unrecognized mount option "Josÿ/" or missing value 19:15:38 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = socket$unix(0x1, 0x5, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000025c0)) r3 = socket$unix(0x1, 0x5, 0x0) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8000, 0x7, &(0x7f0000002500)=[{&(0x7f0000000100)="c866ad29609e2ea3af4ece8f0658af", 0xf, 0xf1}, {&(0x7f0000000140), 0x0, 0xe07}, {&(0x7f0000000400)="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", 0x1000, 0x8}, {&(0x7f0000000180)="1d4eadb0f7fafafc38197e0fe0efe12d730a189d05447ba1f773901eaf79e48c53c7a005a8b4cd76cfedc38630e08e62b44305619a17fa7310c8acea379b5c6116b302d50c51c12eb51ed308792bd47a45d93b4349b7a88b3fb77782fec26781aa88ef2345ecacd34f82b60c5fd5cf4af91f0db731bae16b03877ed31e6163ca3668bc6f7278ea91fb60aba35fd95e6732f3c8e68082f6aa6de1b9dc30c7842c254dff973c614083381e66de11087891883d99d843f6923787809cbbda183d3b3579b52e4cd49e6e91f5d764e779e24ab6f4892757177fee", 0xd8, 0x6}, {&(0x7f0000000280)="00c2b39664df30903c3facaf25f89d504186010a8aee146623a4405ca260b9d7458c354cabbb14fd67f0e39129e9c3f91346fa25463235cf0135f561acdefc73e7aa5ed22a9a2188d1af3a2c3073cfd857e1b7c5f1275e020b82a78e1abe82a0bdc09b2cfdec282759149520c06c522d20f08738dae4d1941852afbc8a7ef6dcf24e8412c1d06c70898703f16c11b49c6e65c961bc282bece15b0eca4ad6e754f6", 0xa1, 0x1ff}, {&(0x7f0000001400)="120ef22052fce645c41abb0cd82ad1d15d447f50a3b70a0ac4326cabbbcd399cfecb5dbc54ad116d49e655cc484c652aad2dd07459152d32e27785a5dab355a9cc717779eb5ffcd1bb7500963e547a6a9145f12dc183f8f1d99ff2e28dff7ff000a470baf2ec1da0577e508beb880ef47c75884052f5b7a20a3c78311bd646ead883f47b4bc4ed2bd2c2e1d638246cff9465b3b4df39ba6880c6c3c33a3ae854b05e19f176c6d55f1c40412da7317c998ad878d12acc08b7eaf0945a1d2f290f794a0d187ce7e9630185befc60051b7e6a3f7cc9902b4b6e9d382fd4dfcdcd32d1bf9c795f244ffc662118", 0xeb, 0x2}, {&(0x7f0000001500)="a1e6f541ef3606cf0a71f6a1bbcf1e95fa2b6449083abc6a0ea5f65159db97fc468e7cb4139a479a260dce07e0efa565bdab251efce345077b2354460cf01481ca2024d657995d6c2c42781b9be7e0ba8da644a30f4c3f9aa83f8746b6dc289f90d9dcb595658d2be77981cf50da1535a4cb8b28b6ebbabf1f75d9386c61a9ddd4373e1e126a9fefbbb1cc6ec02d5a5a8690b8e37ef53be2806ec4535dc787935e0db986fa66e0000fb575a7b561d7f94c2d9629efaef2a81ddb4329a1964b8082b093768889f5812072bee4712949b0d015226c520ac175dfa8c041d4696b1baac7efc2741eb0ac41d3fac7f5ff0f93283fc2a3714693e46a65a4e002c2937d9d98ed47cfaecf91bc398d1dbda229489471bf4d23a7fcf8f669740124635d39537ccc2209a466b95636cd4f65eefc586998bb9da59bd2217ff7a1e75a90ab30e4b488176c80f607d8e893ddcd10e280927ebc933c21fb1995572e5a77aab22b9074fb3b5a18bfce9585889b32c9eb1abfe3d5c2fa5a7f4837c0a353a1ad1e9586488296327a1e266bdb4212d56b2c079a28e4508c5c51f5bb04fe31996e5b2bcfe0a6e616616cc1885a2119fc2a39fe0c496cb658b6dce1974d09ef1147a6c9260eb18f1bc94ee58babdac319a23abc3a759db117e008460c0bfacdd8ed9ed1f0220bda0e5d4639a7fa7f072baced6097f58cdded46e091837af766c78a64c34708797d0cf20c56a8a59f8d34b321ac6f135fc3a6ebef10be636a0ab7477aa119bf3dc7050e97905214989e119ead6b52d064b5850a2a25b5b73be9cecf2e7821f9c3070b42d301f65ec56f192b4f48aa43d8d714d3a20e0c24f6fbdae431836788c0acc942f0068b8bf9ea29963fac57f5bd03751682ce748bd7e276cac631a83c97e95d42f4a65606c884434712dc41ab667f7a7882994ac0214f03e9ecf627beff3ce9e9c87d37342099197a28e9d11384b53256fb140110a1d8f524cac9d7e9fe011be5e1c45a181d59c9277d4b94b236687ad5896e5a64e44724c37f0ef47993af1cb7cfc3f7d97abbfb33482461a9068acf4a3fc7a86b4ddcceb3404c6d507c8644cd46ef47f921adc89e83b1f1de32692bff9a2a31ebce41238034a45d038ae74c9b6c0f827c47db3300f84bb73c2b90d1c783763912566d087cb958324192d9d336b76bf9af7e31e8dd6357b8e39d354d9f273e669a3ec832ada9ede0988aa786e4645e479a42b39e032cc6f426d6e354c63ae76fff8d1e4e87cf93292317c7a8dcd0d90441da3dd173222fca64d93c842f64739ef7ed2214ef77f790c9c3d300707f5b82de9dee60e66a7f75e4513b5de5035ed5668f9743cba5b85dcc4edfcdf224909a8aabd3a1e03e89acadacf95b9b2e1885fe6cbe07e8bd0393164869e398fcf4499d77b9b251ca1937d8c9200b6dac8bc7f60a1429565e1705078f1deb3c0cc722ca84490708b14c95da06d53c20aedd3d50e833f56f68aabfa26d4d327ae425d50cafe8e35e3c6f19fab4a1c854e1791b7d4920c9d1d1e96dc31639ed18012a71b81a8219f5dc514ebe1f7f1fb4c73be6f01645bb4ca1ab603161aa2759f5cfe40628737b535919013f5b319375f523c2b2a4f9fb19a4468532eedbf2eb568dfc089d9ebcfbf222638ed89dd2d2018690402aa90d00ec43298d6be57f57305ad16367074e6437223b68a1d7a6a27f8c8078da78d39269d10736901b7d4eec8ee9ce51b82e8378fdae1bd0c4f64fc1981c726d229d6812e7c64496093b5041841f4d82af0519c4feaefa95c3e1653247b56aed7ba29f48f2d83715b309d4eae4c0e88f248e5240302b89bdc273e7510dd8c3a27a6dd1d1893694dc22bb1de509f65aaab25a72bafc5cf50ae823bbe83f8ab954d4ab626d30e8adaad1599818d9529539445311f63292744de6842ce0a995be95e93559424aa1cb45634d66a40f34079edee43efd9289929a8da9c28427bbb3474bf4aff8b71c8c27a7cdff8478a00a8ed7f9f3645c82b1c2c0a275628fa05275a51a76542564f667acd38a3efb360e7112877057a427c6c2b884a79697f5102b99b4f75118bac51027bc0b00c726c22b797bff585ef8dd1ae5e1b8355b8e76ed9f3ffe17a221c5e379a0c628c5daf7af3e95c097dc4ba0811a38a0c3df7c0d6f979e7d1154c871ce963461c1b52652594d610c1ebed62a7272980d32c04b4f7fd3ef340b9dfd7a698bb59878ec988397445aac5b7e37e28e38bde9366a076218b19b18754e12a55fed801fb032dc01730725767ca509b1cdb53e0624e0d05daa639bb129fb3a2291392290f402731a089cf1e7a6d824a8a08284fc44e15f1d3a934d4ce9bd34f6e0cd078de759346a9b2aa9301f11b1d12ef0fcaf789ff5ea2a58a9cadcd21f98eaafd8a3a0d448bad48f9bf7c7a2e3837687619bc624ec4c542c5f281bb7d68870ea127a777a9e1d84a7ec0e11535715f7a39cb12fc27acbbc26922045de90e6b90cd1384532642c15a99a32207b30fa62b54ca24cb90505a0bc3e8104c16ab786017269fa9543e314bdfbd69f4cbd69497538b3ed412d00cb2cdfcbde26f56745f0c0849b1c8e9c07ad576831b9b9ce3e5fda7631945e05a635ac6d9422c2cdecca88fe6e56b78a121ecb60162449a8684153b367659cca7d15a66e6855dc1e65d78a29eae4c85f8138b5dce25485f7e50520739eccc61694766ec371dc6c00cb5ba069063b3c0ad09506084945b33fde0489f0cd7213883e468d176107bf5ba287891489cb352f2f7d699ffd6f476d7f6edbb84d3693dea30ae9dd42696e29e6c4ed05aafa2c8a2b386b5dbaa54a71161aac96a2322de5697857e4c52ddf7fbcc4a32129cfcc08a2b51af77dc89052a65c8234c8e584d9d2301fef57847198a6363f8b9d82c77718272d96262b872d700aa80901efa66f7dc8b54dee5a12ce900580397a14045979472c3829d7030f4c27a9f6e02a927c3b47ab6e0a537f9c47df26033c0b8b0e443cf54349dfc344e8256a4cdeeb632621b09cdcb5df95173e9ca215688db8f617de22c52d3f7f4e91fee4bce936334833706cc17adfceee829a9d986036505d5aef22c941a8bffb388845d6d30d9d55bc6bad7c575beb122d5f233a22a974878f64bc0abc6bb98d11e18dadf45928df92ca2f929b3791d8a6a1ffd0bbc0509b7a94f28fb566120fab6ac132e70a18661e7985541aef9b2a3f1da894f0d69dc81013a976f677ff0d70b8731cc11fb9f7614b80f6c99c617a027f00220810a059696d27e7923b08e71f07d105af89cf1ba3784f494dfdb4f81782841f839f0d2a1669d6c6a0466f09722db7affcf5dfc07f0c677217babebd1c1d60ee284456a825d67acce93a4de152948173bc42102ccb83bef905b39749455b8f64e221cf77e41d863b297349df8c77509057968d8423f7a901eb22a6c53f518280d878d33bf68bd89e7a33ae0c4e5d11cf2cbf3cf693065cb6ec0476acc5c186b42d8a98af7388ccc4a0a004545381138ba0bf74f19d36d3255f988a1e659c0b7791bdb8a91848a712e7202f76dec6159d9c81d7e511e957636c2267dd6b4cd3c76d2314e9fc2582ce9acd2f7a2ec80e7506045fdc0f9d2a0b7eb6d3a294f9cdfce7f64fe874caea7e651009e0e9dd384d589bee4364524b6a500064eeab0d0d7b00db14fb540fd50aee976fca12c3192652b18576a26e4e9bf480c52ccd164ee17fc9fe81769a03e53aa70d651a9e5128d4ad1e28d845c6d2505bd2f318911f1ff684b92953f81ae4258ce00753ed64905488914c3f9a6a74953b41dae50db0cba45bef07cb4f2fd3d8ef31f3ede84763aa6bf40e83a2f9e3f1f9d0f6eb74614ddab8cd8133884aa596af485ed1300d659f90b1b9600f6481a436b843f1f6967c1858b58bd0bffb0064dee71b1c4958f5aec505ec1a840921f1b50fb1117c5e75d4edde31d434b3990b2c1ea065b123a7d50b78d155aaa1d92a86e05dda5202301f7a8bef41cca7e6763743e58421a6c25510d6e1b3a45d85b5f7e9af82e9aef30ea93769d856e101d0621010596c3ff48619423374da63f0fa8ac2aee8ba570afdef7995894ce44513f38d36e54132100138c05fcdf791cd819c220fe41ac15a3975068796002c580d5842f2fbe997cfa8c5a05da1a34267e2da85f78ad70de83061b2a8b616600bba0544b4079cbdacc0831c6f1433c1478d96ac4e114dd770a700141ae5fe6ee31d3edb228a6de81e8febe49804f1824f592df88eba6095f0866f0795d7e74b8ef4ed1645ba4186ee12a6dcd9837ac1e6220ba3266c9fca316e8101fb77f3238354a0c25e0e224b8b3410e4713731eb9f9e81d8e462ec6550316dbbec59216f42792fda33deeddda2f0936c282614f1067e0056a9818f99387f0eb9ee295ab644a6e46dc87698864b74e58e495330b94e24383f7b5c2d34ad179b023f58f7a9febe2905f176f6305e0f5ccc8932b35762fbe696222fb23d1a0750203529b875f6dd8b7c0ced1c671af528b86bd9e26a7c597247eeff086598abbdc1f56c76ae30ff51a598bba4fe5f99b5d7551604b2548b803112ca567e3d75be0593091818fcee9bfbc6ec6375ac1dc629ec60abd0bf3ef032f3b4a98cdea2491538911ed5a8dc39354b7c1ef0e97817bb472f415be1c935c7fb536b0d2b4901ada828b24d9ad554fe900eb402749d6390849d71d6147d2496aed36f702644029217fa82d7814ee7e0a914705105e0e2271bfbbea213783273cc2a7569f5fba61f3ce8211556e5651c73f2da8447fd84fbd473327ba8fab6967f44d50d5b385316637d06c9c57a43d9a52c80d409b9906c57eaf9d0d4849e86df4379274fd89a4c0d55da99cd9a3fcb1a44d674932add31d4d9873e2beec73bfef59b1076c32d9290c1bbe43bdf6983a15b3ffdebb2eef036d0d067a8bbc2ff8d5313aefb4f134a60a2fb4ac54819b71653fd667f75361dd28b9ae59a9811aae0e1adbdaf21244ebfec8c04dd1781e32edd4c7835a443a6b6dcd386b7826231c0238906204b2bbf715d904d16e60eeace981118ceae6670c2dbeafadb3182a30fdee625aa75b17d76820c55f4535947201bbb8e0012299b97087dd130af46759b0aa960d874e778fe02474c96008f772d0eb0637c9bd87fa2b6aa083861888c8912bd0bf3c9fe8072c796b6d048bc14a5a29060426c1cc44e9468a5674752273b9292d00677747cc578593c4a035fd265cd211c18e244c3722147e018cef0e84caadd0ef3a2e4cc5b2e90cbe5105c8fb1967ce6845c5276e5c07b0908731fe4e0ce8fec1586b42d482d79ce25d1c0b376848371bd581b9c7d14f95e46abdf3ce6c991176dcf966b478b0191c326141d97fd48c8b3d8d98f27a157095d505f70e23742e423f26539122d8a04860827faed6421e9a0d52381d67610e5d9971720b425164e8e8cb4fa7adaf3e6e8772d498f72549242719e9edd2253cb93e5854dfbcaa899314927612cb6de25ae6ae591f1b9fb93d8f0302fa8405e2815cbc88aca991bdcad7d4980a7550444de8d5f199a3d1531a95659831ee49eab34f5de6ae71513b7a545fe34bfd16ceaf34e28fc3babe397b0e99e9078841a6cb57c762bfcda371718be0280ac94379dc67eea64db262f250c789db8408daa39c69ba7dbd487a4d71ed773b6f3ec8a41844b4cc41160a399a6a5f30c1742fd4d53c358a0f7f0acd24a58a428f257adc7f88677f980bd3d25414b016a45cfc92d7f8b611313320dbf8be06a6a51e38592e8c6d300cc22342e9611e39b09e39432c04908", 0x1000, 0x1}], 0x2000, &(0x7f0000002600)={[{@uid={'uid', 0x3d, r1}}, {@resize='resize'}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@measure='measure'}, {@obj_role={'obj_role', 0x3d, 'GPL#em0'}}, {@audit='audit'}, {@euid_eq={'euid', 0x3d, r2}}, {@subj_user={'subj_user', 0x3d, ')\'posix_acl_accesskeyringvmnet0\\vmnet1bdev%ppp1posix_acl_accesssystemmime_type$\x96'}}, {@fowner_lt={'fowner<', r4}}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}]}) 19:15:38 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 808.391086][T28246] FAT-fs (loop1): bogus number of reserved sectors [ 808.415381][T28246] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 808.425041][T28246] FAT-fs (loop1): Can't find a valid FAT filesystem [ 808.518473][T28246] FAT-fs (loop1): bogus number of reserved sectors [ 808.536467][T28246] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 808.581524][T28246] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:38 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:39 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:39 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x0, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:39 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x358, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f733178666c6f70bcbef4f54a8ab5b9c5e970792c00507e9457fb"]) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0xc0820, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000100)=""/44) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x2a, 0x29, 0x2, {0x2, [{{0x0, 0x2, 0x8}, 0x8000, 0x0, 0x7, './file0'}]}}, 0x2a) 19:15:39 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:39 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 809.760941][ C0] net_ratelimit: 12 callbacks suppressed [ 809.760951][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 809.772118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 809.772646][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 809.784819][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 809.801123][T28291] FAT-fs (loop1): Unrecognized mount option "dos1xflop¼¾ôõJŠµ¹Åépy" or missing value 19:15:40 executing program 1: lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1a3, 0x0, 0x800, &(0x7f0000000200)={[{@fat=@gid={'gid', 0x3d, r0}}]}) 19:15:40 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x0, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:40 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 810.500289][T28312] FAT-fs (loop1): bogus number of reserved sectors [ 810.540123][T28312] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:40 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:40 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f733178666c6f706f003a9f"]) 19:15:40 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 810.872170][T28336] FAT-fs (loop1): Unrecognized mount option "dos1xflopo" or missing value [ 810.936037][T28336] FAT-fs (loop1): Unrecognized mount option "dos1xflopo" or missing value 19:15:41 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 811.200942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 811.206850][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:15:41 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 811.330134][T28348] FAT-fs (loop1): bogus number of reserved sectors [ 811.355786][T28348] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 811.381269][T28348] FAT-fs (loop1): Can't find a valid FAT filesystem [ 811.459473][ T27] audit: type=1800 audit(1578942941.537:324): pid=28355 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17272 res=0 19:15:41 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x0, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 811.516721][T28357] FAT-fs (loop1): bogus number of reserved sectors [ 811.539874][T28357] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 811.620543][T28357] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:41 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:41 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f732f93666c6f70705c2c00"]) 19:15:41 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 811.840942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 811.840950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 811.840973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 811.846792][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:42 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) [ 812.215238][T28382] FAT-fs (loop1): Unrecognized mount option "dos/“flopp\" or missing value [ 812.450333][T28382] FAT-fs (loop1): Unrecognized mount option "dos/“flopp\" or missing value 19:15:42 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x0, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:42 executing program 1: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @vlan={{0xc, 0x1, 'vlan\x00'}, {0x10, 0x2, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'macvlan1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r5 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='msdos\x00', r0) keyctl$link(0x8, r5, 0xfffffffffffffffd) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 19:15:42 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 812.849648][T28408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 812.989933][T28411] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 813.097310][T28408] FAT-fs (loop1): bogus number of reserved sectors 19:15:43 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:43 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x3f, 0x0, 0x0, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 813.138424][T28408] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 813.151401][T28408] FAT-fs (loop1): Can't find a valid FAT filesystem [ 813.218202][T28411] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:15:43 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(0x0, 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 813.323571][T28423] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 813.407137][T28411] FAT-fs (loop1): bogus number of reserved sectors [ 813.441068][T28411] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 813.529255][T28411] FAT-fs (loop1): Can't find a valid FAT filesystem [ 813.609337][ T27] audit: type=1800 audit(1578942943.687:325): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17285 res=0 19:15:43 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x0, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:43 executing program 1: r0 = msgget$private(0x0, 0x405) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="00f4a2b7de6f7b6c13aebf15c6faf1db56ef991db3ebe482c1da1232637eeb5d239f4f128c412898bfd0338da017aa0d05ffcb906e237ab51895e3bf7c28cfbe401a28153ee2d1d5d61ef0a54787fe8af7855fd483ad208020cbd3a29e881a26abfd63e7becc90a5b3dcfe8d6c56a3739b0fe635601b170300bf080dc5182f826144c6b328a1d7a7b8ea1dae7aa1e06c3135cbd0f85bd93c9579919ea2c2270961e149b7c2db70a3b7834df92570d33ff98c157a87cab14e0dc948d052ece9bbf65367225dfecabe17bd63cb1d205bbae07aeca744f77730ee13ca30350bf6311f6c1ea6127ba8408b2a34d2567102afa2"]) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = accept4$inet(r5, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10, 0x100000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) getdents64(r8, &(0x7f0000000440)=""/4096, 0x1000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r3, 0x1f, 0x3, 0x5, 0x535e, 0xfffff001}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0xa5fc, 0x8206, 0x5, 0x4, r9}, &(0x7f0000000140)=0x10) 19:15:44 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 814.056111][T28445] FAT-fs (loop1): bogus number of reserved sectors [ 814.074722][T28445] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:44 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x0, 0x0, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:44 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:44 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x0, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 814.266824][T28452] FAT-fs (loop1): bogus number of reserved sectors [ 814.291534][T28452] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:44 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @vlan={{0xc, 0x1, 'vlan\x00'}, {0x10, 0x2, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}}, 0x0) r4 = accept(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000100)=0x80) bind(r4, &(0x7f0000000140)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80) [ 814.915262][T28486] FAT-fs (loop1): bogus number of reserved sectors [ 815.001258][T28486] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 815.089113][T28492] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:15:45 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 815.158326][T28486] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:45 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 815.216591][T28495] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:15:45 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 815.322798][T28486] FAT-fs (loop1): bogus number of reserved sectors [ 815.401215][T28486] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 815.413576][T28486] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:45 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 815.443901][ T27] audit: type=1800 audit(1578942945.527:326): pid=28503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17275 res=0 [ 815.445874][T28495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:15:45 executing program 3: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 815.531350][ C1] net_ratelimit: 10 callbacks suppressed [ 815.537131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 815.543412][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:45 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="647dd0b2d361af86ce39a93a746f733178666c6f7070792c00"]) [ 816.000957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 816.000976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 816.006709][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 816.012441][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 816.140263][T28535] FAT-fs (loop1): Unrecognized mount option "d}вÓa¯†Î9©:tos1xfloppy" or missing value [ 816.225430][T28535] FAT-fs (loop1): Unrecognized mount option "d}вÓa¯†Î9©:tos1xfloppy" or missing value 19:15:46 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xffffffff, 0x8) 19:15:46 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:46 executing program 5: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:46 executing program 3: socket$kcm(0x11, 0xa, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 816.633990][T28548] FAT-fs (loop1): bogus number of reserved sectors [ 816.694273][T28548] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 816.704239][T28548] FAT-fs (loop1): Can't find a valid FAT filesystem [ 816.759593][T28548] FAT-fs (loop1): bogus number of reserved sectors [ 816.784483][T28548] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 816.836254][T28548] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d167800139000000000000"]) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x600002, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xff}, 0x1) 19:15:47 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:47 executing program 3: socket$kcm(0x11, 0xa, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 817.212096][T28571] FAT-fs (loop1): Unrecognized mount option "Ñg€9" or missing value [ 817.335016][T28571] FAT-fs (loop1): Unrecognized mount option "Ñg€9" or missing value [ 817.440958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 817.446789][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:15:47 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) [ 817.601705][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 817.608735][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:47 executing program 0: dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:47 executing program 5: socket$kcm(0x11, 0xa, 0x300) dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 817.860287][T28595] FAT-fs (loop1): bogus number of reserved sectors [ 817.960960][T28595] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 817.976377][T28595] FAT-fs (loop1): Can't find a valid FAT filesystem [ 818.049200][T28595] FAT-fs (loop1): bogus number of reserved sectors [ 818.056124][T28595] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 818.066023][T28595] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 19:15:48 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:48 executing program 3: socket$kcm(0x11, 0xa, 0x300) dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 818.437472][T28616] FAT-fs (loop1): bogus number of reserved sectors [ 818.458638][T28616] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 818.474376][T28616] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:48 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 818.624021][T28616] FAT-fs (loop1): bogus number of reserved sectors [ 818.677503][T28616] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 818.686762][T28616] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:48 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x720080, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x5394ff0ffaf52b35, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f733178ff070000f08df862"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x16) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0xff, 0xa, 0x4, 0x200000, 0x10001, {0x0, 0x2710}, {0x5, 0x2, 0x4, 0x35, 0x0, 0x8, "b60a4bee"}, 0x7f, 0x1, @userptr=0x4, 0x3, 0x0, r1}) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f00000001c0)) 19:15:49 executing program 0: socket$kcm(0x11, 0xa, 0x300) dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 819.127618][T28642] FAT-fs (loop1): Unrecognized mount option "dos1xÿ" or missing value 19:15:49 executing program 5: socket$kcm(0x11, 0xa, 0x300) dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 819.268956][T28647] FAT-fs (loop1): Unrecognized mount option "dos1xÿ" or missing value 19:15:49 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:49 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x991dd0d83a56933, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) 19:15:49 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 819.943599][T28676] FAT-fs (loop1): bogus number of reserved sectors [ 819.950250][T28676] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 819.962537][T28676] FAT-fs (loop1): Can't find a valid FAT filesystem [ 820.027213][T28676] FAT-fs (loop1): bogus number of reserved sectors [ 820.041506][T28676] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 820.060850][T28676] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x12b) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000040)) [ 820.265581][T28687] FAT-fs (loop1): Unrecognized mount option "mask=^MAY_READ" or missing value [ 820.339706][T28687] FAT-fs (loop1): Unrecognized mount option "mask=^MAY_READ" or missing value 19:15:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x991dd0d83a56933, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) 19:15:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40800, &(0x7f00000000c0)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}], [{@obj_role={'obj_role', 0x3d, 'eth0vboxnet0'}}, {@measure='measure'}]}) 19:15:50 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:50 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 820.640936][ C1] net_ratelimit: 14 callbacks suppressed [ 820.640946][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 820.652501][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 820.880544][T28708] FAT-fs (loop0): bogus number of reserved sectors [ 820.904267][T28708] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 820.926763][T28708] FAT-fs (loop0): Can't find a valid FAT filesystem 19:15:51 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'macvlan0\x00'}}, 0x1e) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)) 19:15:51 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setstatus(r3, 0x4, 0x102800) write(r1, &(0x7f0000000100)='b', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x6) dup3(r1, r0, 0x0) [ 821.235306][T28726] FAT-fs (loop1): bogus number of reserved sectors [ 821.256566][T28726] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 821.317466][T28726] FAT-fs (loop1): Can't find a valid FAT filesystem [ 821.508551][T28726] FAT-fs (loop1): bogus number of reserved sectors [ 821.537956][T28726] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 821.571040][T28726] FAT-fs (loop1): Can't find a valid FAT filesystem [ 821.601361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 821.607700][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:15:51 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:51 executing program 5: socket$kcm(0x11, 0xa, 0x300) dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:51 executing program 0 (fault-call:19 fault-nth:0): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 821.771540][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 821.778070][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:51 executing program 1: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000)={[{@dots='dots'}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @vlan={{0xc, 0x1, 'vlan\x00'}, {0x10, 0x2, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000002c0)={0x9d0000, 0x6, 0x3, r0, 0x0, &(0x7f0000000280)={0x9b090e, 0x1, [], @string=&(0x7f0000000040)}}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0xc0000, 0x0, [0xffffffffffffffff, 0xff, 0x20, 0x4, 0x6, 0xff, 0x7, 0x8]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x481, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000100)={0x800, 0x1, 0x4}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f00000001c0)={0x8000000000000000, 0x4000, 0x1f, 0x4, 0x14}) 19:15:52 executing program 3 (fault-call:13 fault-nth:0): dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 822.082743][T28757] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 822.148618][T28765] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 822.240964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 822.241016][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 822.247145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 822.252879][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 822.295715][T28755] FAULT_INJECTION: forcing a failure. [ 822.295715][T28755] name failslab, interval 1, probability 0, space 0, times 0 [ 822.313545][T28755] CPU: 1 PID: 28755 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 822.323360][T28755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.333435][T28755] Call Trace: [ 822.336747][T28755] dump_stack+0x11d/0x181 [ 822.341106][T28755] should_fail.cold+0xa/0x1a [ 822.345714][T28755] __should_failslab+0xee/0x130 [ 822.350779][T28755] should_failslab+0x9/0x14 [ 822.355928][T28755] kmem_cache_alloc_trace+0x2a/0x5d0 [ 822.361386][T28755] ? ctx_sched_in+0x66/0x360 [ 822.366136][T28755] ? __rcu_read_unlock+0x66/0x3d0 [ 822.371321][T28755] iomap_dio_rw+0x11f/0x9a0 [ 822.376687][T28755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 822.382949][T28755] ? irq_work_interrupt+0xa/0x20 [ 822.387888][T28755] ? ext4_dio_supported+0xb8/0x340 [ 822.393102][T28755] ? constant_test_bit+0x12/0x30 [ 822.398860][T28755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 822.405115][T28755] ext4_file_read_iter+0x2e4/0x380 [ 822.410289][T28755] ? ext4_file_read_iter+0x2e4/0x380 [ 822.415702][T28755] generic_file_splice_read+0x35c/0x500 [ 822.421310][T28755] do_splice_to+0xf2/0x130 [ 822.425748][T28755] ? add_to_pipe+0x1c0/0x1c0 [ 822.430336][T28755] ? add_to_pipe+0x1c0/0x1c0 [ 822.434931][T28755] splice_direct_to_actor+0x1b6/0x540 [ 822.440300][T28755] ? generic_pipe_buf_nosteal+0x20/0x20 [ 822.445915][T28755] do_splice_direct+0x161/0x1e0 [ 822.450826][T28755] do_sendfile+0x384/0x7f0 [ 822.455254][T28755] __x64_sys_sendfile64+0x12a/0x140 [ 822.460507][T28755] do_syscall_64+0xcc/0x3a0 [ 822.465014][T28755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.470913][T28755] RIP: 0033:0x45af49 [ 822.475057][T28755] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 822.497268][T28755] RSP: 002b:00007ff7d2545c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 822.505697][T28755] RAX: ffffffffffffffda RBX: 00007ff7d2545c90 RCX: 000000000045af49 [ 822.513677][T28755] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 822.521836][T28755] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 822.529894][T28755] R10: 0000000008800000 R11: 0000000000000246 R12: 00007ff7d25466d4 [ 822.537909][T28755] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000007 19:15:52 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x0, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 822.692484][T28765] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 822.747562][T28774] FAULT_INJECTION: forcing a failure. [ 822.747562][T28774] name failslab, interval 1, probability 0, space 0, times 0 [ 822.811732][T28774] CPU: 0 PID: 28774 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 822.820588][T28774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.830830][T28774] Call Trace: [ 822.834147][T28774] dump_stack+0x11d/0x181 [ 822.838579][T28774] should_fail.cold+0xa/0x1a [ 822.843266][T28774] __should_failslab+0xee/0x130 [ 822.848143][T28774] should_failslab+0x9/0x14 [ 822.852935][T28774] kmem_cache_alloc_trace+0x2a/0x5d0 [ 822.858237][T28774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 822.864501][T28774] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 822.870484][T28774] alloc_pipe_info+0xf8/0x3b0 [ 822.875315][T28774] splice_direct_to_actor+0x4b3/0x540 [ 822.880764][T28774] ? generic_pipe_buf_nosteal+0x20/0x20 [ 822.886380][T28774] ? security_file_permission+0x88/0x280 [ 822.892135][T28774] ? rw_verify_area+0xee/0x250 [ 822.896976][T28774] do_splice_direct+0x161/0x1e0 [ 822.901912][T28774] do_sendfile+0x384/0x7f0 [ 822.906615][T28774] __x64_sys_sendfile64+0x12a/0x140 [ 822.912041][T28774] do_syscall_64+0xcc/0x3a0 [ 822.916594][T28774] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.922493][T28774] RIP: 0033:0x45af49 [ 822.926629][T28774] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 822.946248][T28774] RSP: 002b:00007feb575b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:15:53 executing program 0 (fault-call:19 fault-nth:1): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 822.954822][T28774] RAX: ffffffffffffffda RBX: 00007feb575b2c90 RCX: 000000000045af49 [ 822.962810][T28774] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 822.970821][T28774] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 822.978812][T28774] R10: 0000000008800000 R11: 0000000000000246 R12: 00007feb575b36d4 [ 822.986879][T28774] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000006 19:15:53 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = socket$unix(0x1, 0x5, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x9, 0x7}, {0x4}], r1}, 0x18, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x10100, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000080)={0x0, 0x3}) 19:15:53 executing program 3 (fault-call:13 fault-nth:1): dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:53 executing program 5: socket$kcm(0x11, 0xa, 0x300) dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 823.382366][T28795] FAULT_INJECTION: forcing a failure. [ 823.382366][T28795] name failslab, interval 1, probability 0, space 0, times 0 [ 823.418904][T28795] CPU: 0 PID: 28795 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 823.427619][T28795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.437681][T28795] Call Trace: [ 823.440982][T28795] dump_stack+0x11d/0x181 [ 823.445422][T28795] should_fail.cold+0xa/0x1a [ 823.450066][T28795] __should_failslab+0xee/0x130 [ 823.454934][T28795] should_failslab+0x9/0x14 [ 823.459482][T28795] __kmalloc+0x53/0x690 [ 823.463995][T28795] ? kmem_cache_alloc_trace+0x1e9/0x5d0 [ 823.469655][T28795] ? aa_file_perm+0x39c/0xc20 [ 823.474368][T28795] ? irq_work_interrupt+0xa/0x20 [ 823.479438][T28795] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 823.485378][T28795] ? alloc_pipe_info+0x20e/0x3b0 [ 823.490394][T28795] alloc_pipe_info+0x20e/0x3b0 [ 823.495271][T28795] splice_direct_to_actor+0x4b3/0x540 [ 823.500778][T28795] ? generic_pipe_buf_nosteal+0x20/0x20 [ 823.506338][T28795] ? security_file_permission+0x88/0x280 [ 823.511990][T28795] ? rw_verify_area+0xee/0x250 [ 823.516814][T28795] do_splice_direct+0x161/0x1e0 [ 823.521765][T28795] do_sendfile+0x384/0x7f0 [ 823.526302][T28795] __x64_sys_sendfile64+0x12a/0x140 [ 823.531525][T28795] do_syscall_64+0xcc/0x3a0 [ 823.536054][T28795] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 823.541948][T28795] RIP: 0033:0x45af49 [ 823.545859][T28795] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 823.565498][T28795] RSP: 002b:00007ff7d2545c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 823.573927][T28795] RAX: ffffffffffffffda RBX: 00007ff7d2545c90 RCX: 000000000045af49 [ 823.581903][T28795] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 823.589887][T28795] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 823.597900][T28795] R10: 0000000008800000 R11: 0000000000000246 R12: 00007ff7d25466d4 [ 823.605880][T28795] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000007 [ 823.624017][T28802] FAT-fs (loop1): bogus number of reserved sectors [ 823.659385][T28802] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:53 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x0, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 823.729728][T28802] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:53 executing program 0 (fault-call:19 fault-nth:2): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 823.823378][T28802] FAT-fs (loop1): bogus number of reserved sectors [ 823.830026][T28802] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 823.841128][T28802] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:54 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@fat=@umask={'umask'}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@hash='hash'}]}) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/218, 0xda) 19:15:54 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:54 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 824.307656][T28841] FAT-fs (loop1): Unrecognized mount option "euid<18446744073709551615" or missing value [ 824.439452][T28841] FAT-fs (loop1): Unrecognized mount option "euid<18446744073709551615" or missing value 19:15:54 executing program 5: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x6000, 0x86) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x980000, 0x5, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980926, 0xcdf, [], @p_u16=&(0x7f0000000080)=0x9}}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000240)=0xe8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$unix(0x1, 0x5, 0x0) fstat(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r11) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r14 = socket$unix(0x1, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) fstat(r14, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r15) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)={0x290, 0x0, 0x7, [{{0x6, 0x3, 0xaf, 0x80000000, 0xf, 0x3f, {0x2, 0x560, 0x2, 0x100, 0x2000000000000000, 0x8, 0x1, 0x1, 0x9, 0xffffffc0, 0x10000, r5, r7, 0x3, 0xd2f}}, {0x1, 0x100000001, 0x6, 0x7, 'msdos\x00'}}, {{0x6, 0x3, 0x1e3ca9a9, 0x39, 0x200, 0x2f6b7829, {0x0, 0x100, 0x1, 0x9, 0x8001, 0x101, 0x100, 0x80, 0x10000, 0x0, 0x87, r9, r11, 0x8, 0xffffff00}}, {0x5, 0x2e2a, 0x6, 0xffff, 'msdos\x00'}}, {{0x5, 0x1, 0x1f, 0x2, 0x7, 0xb492, {0x1, 0x40, 0x2, 0x6, 0xc00000000000, 0x2, 0x1, 0x80, 0x4, 0xfffffff8, 0x1, r12, r13, 0x400, 0x7}}, {0x2, 0xffffffffffffffff, 0x6, 0x2, 'cgroup'}}, {{0x0, 0x1, 0x9, 0x51791084, 0x189, 0x2, {0x0, 0x7, 0x4, 0x6, 0x7fff, 0x8000, 0x4, 0x38f, 0x2, 0x8, 0x7, r15, r16, 0x8, 0xffff}}, {0x2, 0x0, 0x6, 0x7, 'msdos\x00'}}]}, 0x290) 19:15:55 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:55 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x0, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 824.929417][T28864] FAT-fs (loop1): bogus number of reserved sectors [ 824.950946][T28864] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 825.042061][T28864] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:55 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800002) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="9fe764581df37bd9aec2fe4798c5a5fafda6553e43b33edb3dff8b5bcb59bebd609548a43dab7a09337a04c78ab088ba8b460563b8d62040c96533603085c5603faa8ac715a729909f16e8764ac65b3a0a3a2cee9aaebf0468d1c498167fbe755a3e8a192cd4a41ae907faf7df82e12d66f2"]) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/196, 0xc4}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000000500)=""/100, 0x64}], 0x6, &(0x7f0000000600)=""/210, 0xd2}, 0xc1e4dd85c5a33956) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000740)) 19:15:55 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:55 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 825.568100][T28898] FAT-fs (loop1): Unrecognized mount option "ŸçdXó{Ù®ÂþG˜Å¥úý¦U>C³>Û=ÿ‹[ËY¾½`•H¤=«z 3zÇŠ°ˆº‹Fc¸Ö @Ée3`0…Å`?ªŠÇ§)ŸèvJÆ[: [ 825.568100][T28898] :" or missing value [ 825.590345][ T27] audit: type=1800 audit(1578942955.677:327): pid=28887 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17331 res=0 [ 825.706079][T28898] FAT-fs (loop1): Unrecognized mount option "ŸçdXó{Ù®ÂþG˜Å¥úý¦U>C³>Û=ÿ‹[ËY¾½`•H¤=«z 3zÇŠ°ˆº‹Fc¸Ö @Ée3`0…Å`?ªŠÇ§)ŸèvJÆ[: [ 825.706079][T28898] :" or missing value [ 825.761249][ C0] net_ratelimit: 12 callbacks suppressed [ 825.761259][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 825.773120][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:15:55 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800003) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 825.885199][ T27] audit: type=1800 audit(1578942955.777:328): pid=28881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17331 res=0 [ 825.921483][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 825.927601][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2, 0x0, 0x0, 0x4800, &(0x7f00000000c0)={[{@fat=@check_normal='check=normal'}]}) 19:15:56 executing program 5: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:56 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x0, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 826.398174][T28928] FAT-fs (loop1): bogus number of reserved sectors [ 826.433186][T28928] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:56 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(0x0, 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 826.525707][T28928] FAT-fs (loop1): bogus number of reserved sectors [ 826.540142][T28928] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:56 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800004) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x8001000, 0x9a7}) 19:15:56 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800006) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:57 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(0x0, 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 826.880987][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 826.886781][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 826.894171][T28956] FAT-fs (loop1): bogus number of reserved sectors [ 826.921804][T28956] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 826.947503][T28956] FAT-fs (loop1): Can't find a valid FAT filesystem [ 827.041251][ T27] audit: type=1800 audit(1578942957.127:329): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17347 res=0 19:15:57 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(0x0, 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 827.203927][T28956] FAT-fs (loop1): bogus number of reserved sectors [ 827.304864][T28956] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:57 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 827.406747][T28956] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:57 executing program 5 (fault-call:21 fault-nth:0): socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:57 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x0, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 827.587263][ T27] audit: type=1800 audit(1578942957.667:330): pid=28958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17329 res=0 19:15:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f73ed91f2731ce8b2258031"]) 19:15:57 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x880000c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 827.662112][ T27] audit: type=1800 audit(1578942957.667:331): pid=28968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17329 res=0 19:15:57 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:57 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800005) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 827.840945][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 827.846796][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 827.863688][T29008] FAT-fs (loop1): Unrecognized mount option "dosí‘òsè²%€1" or missing value [ 827.911492][T29000] FAULT_INJECTION: forcing a failure. [ 827.911492][T29000] name failslab, interval 1, probability 0, space 0, times 0 [ 827.997918][T29008] FAT-fs (loop1): Unrecognized mount option "dosí‘òsè²%€1" or missing value [ 828.006878][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 828.006910][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 828.009817][T29000] CPU: 0 PID: 29000 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 828.027061][T29000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.037145][T29000] Call Trace: [ 828.040477][T29000] dump_stack+0x11d/0x181 [ 828.044848][T29000] should_fail.cold+0xa/0x1a [ 828.049457][T29000] __should_failslab+0xee/0x130 [ 828.054389][T29000] should_failslab+0x9/0x14 [ 828.058914][T29000] kmem_cache_alloc_trace+0x2a/0x5d0 [ 828.064286][T29000] ? __sanitizer_cov_trace_switch+0x13/0x80 [ 828.070279][T29000] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 828.076186][T29000] alloc_pipe_info+0xf8/0x3b0 [ 828.080999][T29000] splice_direct_to_actor+0x4b3/0x540 [ 828.086452][T29000] ? generic_pipe_buf_nosteal+0x20/0x20 [ 828.092089][T29000] ? security_file_permission+0x88/0x280 [ 828.097739][T29000] ? rw_verify_area+0xee/0x250 [ 828.102600][T29000] do_splice_direct+0x161/0x1e0 [ 828.107517][T29000] do_sendfile+0x384/0x7f0 [ 828.111957][T29000] __x64_sys_sendfile64+0x12a/0x140 [ 828.117173][T29000] ? do_syscall_64+0x51/0x3a0 [ 828.121869][T29000] do_syscall_64+0xcc/0x3a0 [ 828.126398][T29000] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.132301][T29000] RIP: 0033:0x45af49 [ 828.136215][T29000] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.155877][T29000] RSP: 002b:00007f45dd5e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 828.164307][T29000] RAX: ffffffffffffffda RBX: 00007f45dd5e3c90 RCX: 000000000045af49 [ 828.172284][T29000] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 828.180349][T29000] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 828.188346][T29000] R10: 0000000008800000 R11: 0000000000000246 R12: 00007f45dd5e46d4 19:15:58 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 828.196422][T29000] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000008 19:15:58 executing program 1: socket$isdn(0x22, 0x3, 0xbffbf3d9bd82d11a) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 19:15:58 executing program 5 (fault-call:21 fault-nth:1): socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 828.446856][ T27] audit: type=1800 audit(1578942958.527:332): pid=29027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16833 res=0 19:15:58 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800006) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 828.544450][T29038] FAT-fs (loop1): bogus number of reserved sectors 19:15:58 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 828.593935][ T27] audit: type=1800 audit(1578942958.597:333): pid=29024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16833 res=0 [ 828.630197][T29038] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:15:58 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x0, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 828.721826][T29038] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:58 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800010) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 829.062299][ T27] audit: type=1800 audit(1578942959.147:334): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16721 res=0 [ 829.115622][ T27] audit: type=1800 audit(1578942959.147:335): pid=29046 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16721 res=0 19:15:59 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:15:59 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800007) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 829.174834][T29078] FAT-fs (loop1): bogus number of reserved sectors [ 829.195200][T29078] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 829.205979][T29078] FAT-fs (loop1): Can't find a valid FAT filesystem 19:15:59 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800012) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 829.448781][T29074] FAULT_INJECTION: forcing a failure. [ 829.448781][T29074] name failslab, interval 1, probability 0, space 0, times 0 [ 829.549825][T29074] CPU: 0 PID: 29074 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 829.559320][T29074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.569373][T29074] Call Trace: [ 829.572796][T29074] dump_stack+0x11d/0x181 [ 829.577148][T29074] should_fail.cold+0xa/0x1a [ 829.581752][T29074] __should_failslab+0xee/0x130 [ 829.586628][T29074] should_failslab+0x9/0x14 [ 829.591275][T29074] __kmalloc+0x53/0x690 [ 829.595487][T29074] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 829.601400][T29074] ? alloc_pipe_info+0x20e/0x3b0 [ 829.606356][T29074] alloc_pipe_info+0x20e/0x3b0 [ 829.611139][T29074] splice_direct_to_actor+0x4b3/0x540 [ 829.616673][T29074] ? generic_pipe_buf_nosteal+0x20/0x20 [ 829.622255][T29074] ? security_file_permission+0x88/0x280 [ 829.627907][T29074] ? rw_verify_area+0xee/0x250 [ 829.632683][T29074] do_splice_direct+0x161/0x1e0 [ 829.637548][T29074] do_sendfile+0x384/0x7f0 [ 829.641990][T29074] __x64_sys_sendfile64+0x12a/0x140 [ 829.647314][T29074] do_syscall_64+0xcc/0x3a0 [ 829.651826][T29074] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 829.657716][T29074] RIP: 0033:0x45af49 [ 829.661652][T29074] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.681261][T29074] RSP: 002b:00007f45dd604c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 829.689686][T29074] RAX: ffffffffffffffda RBX: 00007f45dd604c90 RCX: 000000000045af49 [ 829.697750][T29074] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 829.705774][T29074] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 829.713761][T29074] R10: 0000000008800000 R11: 0000000000000246 R12: 00007f45dd6056d4 [ 829.721771][T29074] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000008 [ 829.825542][ T27] audit: type=1800 audit(1578942959.907:336): pid=29093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16721 res=0 19:16:00 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:00 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:00 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800008) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:00 executing program 5 (fault-call:21 fault-nth:2): socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:00 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800600) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/141) 19:16:00 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:00 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800009) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:00 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 830.725654][T29137] FAT-fs (loop1): bogus number of reserved sectors [ 830.754807][T29137] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 830.849115][T29150] FAULT_INJECTION: forcing a failure. [ 830.849115][T29150] name failslab, interval 1, probability 0, space 0, times 0 [ 830.863690][T29150] CPU: 1 PID: 29150 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 830.872382][T29150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.880781][T29137] FAT-fs (loop1): Can't find a valid FAT filesystem [ 830.882494][T29150] Call Trace: [ 830.882522][T29150] dump_stack+0x11d/0x181 [ 830.882549][T29150] should_fail.cold+0xa/0x1a [ 830.882573][T29150] __should_failslab+0xee/0x130 [ 830.882592][T29150] should_failslab+0x9/0x14 [ 830.882611][T29150] kmem_cache_alloc+0x29/0x5d0 [ 830.882644][T29150] ext4_init_io_end+0x4f/0x120 [ 830.920537][T29150] ext4_writepages+0xd0e/0x2500 [ 830.925411][T29150] ? tomoyo_domain_quota_is_ok+0x1e1/0x2b0 [ 830.931289][T29150] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 830.937605][T29150] ? irq_work_interrupt+0xa/0x20 [ 830.942589][T29150] ? ext4_mark_inode_dirty+0x420/0x420 [ 830.948041][T29150] do_writepages+0x6b/0x170 [ 830.952544][T29150] ? do_writepages+0x6b/0x170 [ 830.957286][T29150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 830.963656][T29150] ? wbc_attach_and_unlock_inode+0xdd/0x3b0 [ 830.969801][T29150] __filemap_fdatawrite_range+0x1c5/0x230 [ 830.975608][T29150] filemap_write_and_wait_range+0xb1/0x150 [ 830.981403][T29150] iomap_dio_rw+0x3a2/0x9a0 [ 830.985983][T29150] ? constant_test_bit+0x12/0x30 [ 830.990936][T29150] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 830.997178][T29150] ext4_file_read_iter+0x2e4/0x380 [ 831.002276][T29150] ? ext4_file_read_iter+0x2e4/0x380 [ 831.007548][T29150] generic_file_splice_read+0x35c/0x500 [ 831.013107][T29150] do_splice_to+0xf2/0x130 [ 831.017534][T29150] ? add_to_pipe+0x1c0/0x1c0 [ 831.022192][T29150] ? add_to_pipe+0x1c0/0x1c0 [ 831.026792][T29150] splice_direct_to_actor+0x1b6/0x540 [ 831.032184][T29150] ? generic_pipe_buf_nosteal+0x20/0x20 [ 831.037760][T29150] do_splice_direct+0x161/0x1e0 [ 831.042634][T29150] do_sendfile+0x384/0x7f0 [ 831.047126][T29150] __x64_sys_sendfile64+0x12a/0x140 [ 831.052349][T29150] do_syscall_64+0xcc/0x3a0 [ 831.056869][T29150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 831.062778][T29150] RIP: 0033:0x45af49 [ 831.066691][T29150] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 831.086281][T29150] RSP: 002b:00007f45dd604c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 831.094693][T29150] RAX: ffffffffffffffda RBX: 00007f45dd604c90 RCX: 000000000045af49 [ 831.104491][T29150] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 831.112464][T29150] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 831.120438][T29150] R10: 0000000008800000 R11: 0000000000000246 R12: 00007f45dd6056d4 [ 831.128460][T29150] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000008 [ 831.138008][ C1] net_ratelimit: 13 callbacks suppressed [ 831.143857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 831.150380][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:01 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800c00) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 831.212616][T29137] FAT-fs (loop1): bogus number of reserved sectors [ 831.227800][T29137] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 831.332372][T29137] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:01 executing program 5 (fault-call:21 fault-nth:3): socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="64c8691a46b811968ee831be9b731079cc5c422c6a32fc6c758c520810dc65fee4b88edbb82407b7dc6826c979bacb2e9df683f1ec533cb8bc070a34016f0f9c2d9d262a1dc252c4d9ad9043767638e9127cad30cbf5764557536bf273b822503c376c40c8d61ceceddb0908c8d7694bbcebf9060905a714dd207bdaf43be176b4c6f26781efcd73f9926436a016d1d27d2a7ff0774c3a29beb768bfa9983b1d2570ebbbb90800000000000000a22bf4a1b9882a42f240a144f7c17173a884607605bbde"]) r0 = socket(0x15, 0x6, 0xff) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x9, &(0x7f0000000840)=[{&(0x7f0000000140)="5c0e221dde52ec28fc95833bd07aa54854", 0x11, 0x9}, {&(0x7f0000000400)="3c104dd5cc0e88e367f334d5ad7aa9925860ce25c12a0a10634d07743fd9b442885ec31ac842b80db615382050ccfbb7047176e30328196870792a7e3cb52141bb12fc156441ab0b34cc1479d534038e5237f30818a5b2c732a0c52ebf372a843f5db9283d793c00fc94a92f12f198c3ddb1d4e9c50d8941f1df1294291029841aec5788733d81ee37483a264547073a8fdd0136c8b08eb9a3f316c49ea1efbca72220a907980c8cf8d1c1394ba7942584e21743adb7ce813149c25a52f8344420a0322566e0442dc914448b", 0xcc, 0xffffffffffffffa5}, {&(0x7f0000000340)="aa603fa1c67ba65544a679d1436779caf9ddd32171d8f7c429dcbc4ed05484f0c4da090c688b7cf22098c2caa5904e907c733d878e7822392fcb7bb582f0205cc9b5c2a95196faf3245ddc6e791fb7aae61634", 0x53, 0x7}, {&(0x7f0000000500)="31bd739b7c17a85ce8a4656e231214f0dc0507527882f0b05f9da5ba7893931db132646e", 0x6, 0x2}, {&(0x7f0000000540)="2cf704e3f6fe3310b9f28fe47ea49780c17b7e53c6ef07ec662632e309a8daf7808596834fa955dfe7e6d559aab7de170a30577bd40232aac3737560188bf6ff1f972ef73a5368e2242812ee1d012a70c398e7920bc9d11415fc2e526c6c6e3741dbe1fd787769d2d876c46f777a0ca4383b37194a284db68e66a3fa16e290d368a69af6fe2fa41435a81b0ef09e4594195d583b2f989a111d00", 0x16, 0x7}, {&(0x7f0000000600)="f79fed3e53ef313aab0ff52900446181d4", 0x11, 0x75}, {&(0x7f0000000640)="2c614ed67d8372678b45097372a8117dcc85f1fc82f311a5d3e31f90a980dc0b8d5f54aaf900739040f167dc05019cd6b3536b55a7f21b3c9c88f6207e6e74bbfb11060b733c1cdd01a47f8c885793dedeb3baef8e07e58736ba5808097765af80ef759b175fef2fa0d6627f06aec656cbeafd723d1a31099646e578bd8f142fc028b4216b4d570b79f5d8742b4ca1d5a1fb4efe6e04a95ac6ee2f65d7a83fdd515067590226046dc8fa84a48daec6e9e5f45ff6ad5f1753700b0ea1fc83bf2fff37ad", 0xc3, 0x1}, {&(0x7f0000000740)="615162dd938f9d6caba49c34c67f6b3998edec4b37555123a7fd2b3d66da96a4e2c4bd1ff334f59bbbd80ea65ab9fa3f37883351dadd355c0a45722a96198d787ac7f8835ae16d8da0f09cf929c8ab32bfdbb7da21db76aa58136d5aebd5cfaf9f6e60fd04cdcf68696113847d66b0d9b33181954f2d522690f2e42014", 0xfffffd4f, 0x9}, {&(0x7f00000007c0)="8ed184b1d4b05c0a3610015e81ed06a70e3dc5f4e8d1a009db36755aeb167ba4f47d57ddd719008582014490b36886582649467b499b18f793c49db3f818dc2bb6592843b7894a14794f0f5cebd6a83c0593658679f296eec625d81ab41e6cc40e6610345a1033f9a78a034b492df9", 0x6f, 0x5}], 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0x55, 0x4) [ 831.466280][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 831.466352][ T27] audit: type=1800 audit(1578942961.547:340): pid=29154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16993 res=0 19:16:01 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8801200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:01 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880000a) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:01 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 831.564363][ T27] audit: type=1800 audit(1578942961.577:341): pid=29161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16993 res=0 [ 831.688096][T29188] FAT-fs (loop1): Unrecognized mount option "dÈiF¸–Žè1¾›syÌ\B" or missing value [ 831.880452][T29190] FAULT_INJECTION: forcing a failure. [ 831.880452][T29190] name failslab, interval 1, probability 0, space 0, times 0 [ 831.958058][T29190] CPU: 1 PID: 29190 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 831.966764][T29190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.976821][T29190] Call Trace: [ 831.980201][T29190] dump_stack+0x11d/0x181 [ 831.984545][T29190] should_fail.cold+0xa/0x1a [ 831.989252][T29190] __should_failslab+0xee/0x130 [ 831.994111][T29190] should_failslab+0x9/0x14 [ 831.998626][T29190] kmem_cache_alloc+0x29/0x5d0 [ 832.001003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 832.003413][T29190] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 832.009137][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 832.015000][T29190] ? __write_once_size+0x41/0xe0 [ 832.015024][T29190] ext4_init_io_end+0x4f/0x120 [ 832.015049][T29190] ext4_writepages+0x94a/0x2500 [ 832.035330][T29190] ? native_apic_msr_write+0x66/0x70 [ 832.040702][T29190] ? lapic_next_event+0x41/0x50 [ 832.045590][T29190] ? clockevents_program_event+0xa0/0x240 [ 832.051385][T29190] ? hrtimer_start_range_ns+0x468/0x6a0 [ 832.056948][T29190] ? irq_work_interrupt+0xa/0x20 [ 832.061944][T29190] ? ext4_mark_inode_dirty+0x420/0x420 [ 832.067414][T29190] do_writepages+0x6b/0x170 [ 832.071925][T29190] ? do_writepages+0x6b/0x170 [ 832.076783][T29190] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 832.083045][T29190] ? wbc_attach_and_unlock_inode+0xdd/0x3b0 [ 832.088959][T29190] __filemap_fdatawrite_range+0x1c5/0x230 [ 832.094737][T29190] filemap_write_and_wait_range+0xb1/0x150 [ 832.100558][T29190] iomap_dio_rw+0x3a2/0x9a0 [ 832.105140][T29190] ? constant_test_bit+0x12/0x30 [ 832.110449][T29190] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 832.116715][T29190] ext4_file_read_iter+0x2e4/0x380 [ 832.121841][T29190] ? ext4_file_read_iter+0x2e4/0x380 [ 832.127209][T29190] generic_file_splice_read+0x35c/0x500 [ 832.132778][T29190] do_splice_to+0xf2/0x130 [ 832.137211][T29190] ? add_to_pipe+0x1c0/0x1c0 [ 832.141806][T29190] ? add_to_pipe+0x1c0/0x1c0 [ 832.146486][T29190] splice_direct_to_actor+0x1b6/0x540 [ 832.151963][T29190] ? generic_pipe_buf_nosteal+0x20/0x20 [ 832.157604][T29190] do_splice_direct+0x161/0x1e0 [ 832.162498][T29190] do_sendfile+0x384/0x7f0 [ 832.166936][T29190] __x64_sys_sendfile64+0x12a/0x140 [ 832.172158][T29190] ? do_syscall_64+0xb5/0x3a0 [ 832.176869][T29190] do_syscall_64+0xcc/0x3a0 [ 832.181395][T29190] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 832.187677][T29190] RIP: 0033:0x45af49 [ 832.191618][T29190] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 832.211227][T29190] RSP: 002b:00007f45dd5e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 832.219707][T29190] RAX: ffffffffffffffda RBX: 00007f45dd5e3c90 RCX: 000000000045af49 [ 832.227691][T29190] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 832.235745][T29190] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 832.243742][T29190] R10: 0000000008800000 R11: 0000000000000246 R12: 00007f45dd5e46d4 [ 832.251797][T29190] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000008 [ 832.261342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 832.267573][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:02 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8803f00) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:02 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 832.497476][ T27] audit: type=1800 audit(1578942962.577:342): pid=29192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16913 res=0 [ 832.533515][T29204] FAT-fs (loop1): Unrecognized mount option "dÈiF¸–Žè1¾›syÌ\B" or missing value 19:16:02 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880000b) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 832.556184][ T27] audit: type=1800 audit(1578942962.577:343): pid=29197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16913 res=0 [ 832.640952][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 832.640996][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 832.646865][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:16:02 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:02 executing program 5 (fault-call:21 fault-nth:4): socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:03 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x880ff0f) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f73aa54a05171a8b7452c00"]) [ 833.201682][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 833.215477][ T27] audit: type=1800 audit(1578942963.297:344): pid=29241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16977 res=0 19:16:03 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 833.326364][ T27] audit: type=1800 audit(1578942963.297:345): pid=29246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16977 res=0 [ 833.350231][T29254] FAULT_INJECTION: forcing a failure. [ 833.350231][T29254] name failslab, interval 1, probability 0, space 0, times 0 [ 833.393532][T29270] FAT-fs (loop1): Unrecognized mount option "dosªT Qq¨·E" or missing value [ 833.414590][T29254] CPU: 0 PID: 29254 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 833.423743][T29254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.434075][T29254] Call Trace: [ 833.437384][T29254] dump_stack+0x11d/0x181 [ 833.441723][T29254] ? printk+0x8f/0x91 [ 833.445825][T29254] should_fail.cold+0xa/0x1a [ 833.450430][T29254] __should_failslab+0xee/0x130 [ 833.455321][T29254] should_failslab+0x9/0x14 [ 833.459850][T29254] kmem_cache_alloc+0x29/0x5d0 [ 833.464696][T29254] ext4_init_io_end+0x4f/0x120 [ 833.470078][T29254] ext4_writepages+0xd0e/0x2500 [ 833.474963][T29254] ? perf_pmu_enable+0x8f/0xa0 [ 833.479791][T29254] ? hrtimer_try_to_cancel+0x40/0x260 [ 833.485222][T29254] ? 0xffffffff81000000 [ 833.489452][T29254] ? irq_work_interrupt+0xa/0x20 [ 833.494437][T29254] ? ext4_mark_inode_dirty+0x420/0x420 [ 833.500007][T29254] do_writepages+0x6b/0x170 [ 833.504613][T29254] ? do_writepages+0x6b/0x170 [ 833.509326][T29254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.515715][T29254] ? wbc_attach_and_unlock_inode+0xdd/0x3b0 [ 833.521993][T29254] __filemap_fdatawrite_range+0x1c5/0x230 [ 833.527754][T29254] filemap_write_and_wait_range+0xb1/0x150 [ 833.533581][T29254] iomap_dio_rw+0x3a2/0x9a0 [ 833.538108][T29254] ? switch_mm_irqs_off+0x1a1/0x5f0 19:16:03 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:03 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 833.543604][T29254] ? constant_test_bit+0x12/0x30 [ 833.548562][T29254] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 833.554822][T29254] ext4_file_read_iter+0x2e4/0x380 [ 833.559945][T29254] ? ext4_file_read_iter+0x2e4/0x380 [ 833.565273][T29254] generic_file_splice_read+0x35c/0x500 [ 833.570879][T29254] do_splice_to+0xf2/0x130 [ 833.575334][T29254] ? add_to_pipe+0x1c0/0x1c0 [ 833.579933][T29254] ? add_to_pipe+0x1c0/0x1c0 [ 833.584540][T29254] splice_direct_to_actor+0x1b6/0x540 [ 833.589906][T29254] ? generic_pipe_buf_nosteal+0x20/0x20 [ 833.595569][T29254] do_splice_direct+0x161/0x1e0 [ 833.600528][T29254] do_sendfile+0x384/0x7f0 [ 833.605024][T29254] __x64_sys_sendfile64+0x12a/0x140 [ 833.610299][T29254] do_syscall_64+0xcc/0x3a0 [ 833.614801][T29254] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 833.620692][T29254] RIP: 0033:0x45af49 [ 833.624629][T29254] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:16:03 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880000c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 833.644804][T29254] RSP: 002b:00007f45dd604c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 833.653236][T29254] RAX: ffffffffffffffda RBX: 00007f45dd604c90 RCX: 000000000045af49 [ 833.661232][T29254] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 833.669507][T29254] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 833.677632][T29254] R10: 0000000008800000 R11: 0000000000000246 R12: 00007f45dd6056d4 [ 833.685663][T29254] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000008 [ 833.760598][T29270] FAT-fs (loop1): Unrecognized mount option "dosªT Qq¨·E" or missing value 19:16:04 executing program 5 (fault-call:21 fault-nth:5): socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="546f73b7c39931786687b9e2c5d1d506752b343fe96d44bbc34c6f7070792ccf"]) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0xf000000, 0x2, 0x400, r0, 0x0, &(0x7f0000000140)={0x99096f, 0x200, [], @value=0x9}}) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="00042abd7000fbdbdf2502000000140006007663616e300000000007a1c5c539be6fb137453700000000000000080005007f0000011400060076657468315f746f5f6272696467650008000400ffffffff08000400ffffffff140003000000000000000000000000000000000105000100010000000800050000"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sync_file_range(r4, 0xfffffffffffffffd, 0x3, 0x2) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000000c0)={0xafc87571c6d3c985, 0x70, 0xfc, 0x1e, 0xd, 0x7, 0x0, 0xffff, 0x40401, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000080)}, 0x2, 0x2d, 0x3, 0x2, 0x1f, 0x100, 0x101}) 19:16:04 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 834.253847][T29310] FAT-fs (loop1): Unrecognized mount option "Tos·Ã™1xf‡¹âÅÑÕu+4?émD»ÃLoppy" or missing value [ 834.272512][ T27] audit: type=1800 audit(1578942964.357:346): pid=29282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16801 res=0 19:16:04 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880000d) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 834.383322][T29304] FAULT_INJECTION: forcing a failure. [ 834.383322][T29304] name failslab, interval 1, probability 0, space 0, times 0 [ 834.446702][ T27] audit: type=1800 audit(1578942964.377:347): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16801 res=0 [ 834.484962][T29304] CPU: 0 PID: 29304 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 834.493692][T29304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.504539][T29304] Call Trace: [ 834.507861][T29304] dump_stack+0x11d/0x181 [ 834.512230][T29304] should_fail.cold+0xa/0x1a [ 834.516835][T29304] ? mempool_free+0x1b0/0x1b0 [ 834.521522][T29304] __should_failslab+0xee/0x130 [ 834.526434][T29304] should_failslab+0x9/0x14 [ 834.531021][T29304] kmem_cache_alloc+0x29/0x5d0 [ 834.535799][T29304] ? memcg_kmem_put_cache+0x7c/0xc0 [ 834.541012][T29304] ? debug_smp_processor_id+0x43/0x137 [ 834.546523][T29304] ? kmem_cache_alloc+0x1f3/0x5d0 [ 834.551564][T29304] ? mempool_free+0x1b0/0x1b0 [ 834.556317][T29304] mempool_alloc_slab+0x27/0x40 [ 834.561195][T29304] mempool_alloc+0x8e/0x270 [ 834.565776][T29304] ? mempool_free+0x1b0/0x1b0 [ 834.570531][T29304] ? mempool_alloc_slab+0x2f/0x40 [ 834.575641][T29304] ? mempool_alloc+0xa0/0x270 [ 834.580340][T29304] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 834.586306][T29304] bvec_alloc+0x143/0x1e0 [ 834.590646][T29304] bio_alloc_bioset+0x2b7/0x3e0 [ 834.596391][T29304] ext4_bio_write_page+0x676/0xb4e [ 834.601606][T29304] mpage_submit_page+0xe4/0x1a0 [ 834.606554][T29304] mpage_process_page_bufs+0x3e5/0x400 [ 834.612050][T29304] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 834.617979][T29304] mpage_prepare_extent_to_map+0x48b/0x760 [ 834.623818][T29304] ext4_writepages+0x974/0x2500 [ 834.628863][T29304] ? tomoyo_domain_quota_is_ok+0x1e1/0x2b0 [ 834.634757][T29304] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 834.641029][T29304] ? ext4_mark_inode_dirty+0x420/0x420 [ 834.646552][T29304] do_writepages+0x6b/0x170 [ 834.651064][T29304] ? do_writepages+0x6b/0x170 [ 834.656802][T29304] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.663172][T29304] ? wbc_attach_and_unlock_inode+0xdd/0x3b0 [ 834.669385][T29304] __filemap_fdatawrite_range+0x1c5/0x230 [ 834.676512][T29304] filemap_write_and_wait_range+0xb1/0x150 [ 834.682448][T29304] iomap_dio_rw+0x3a2/0x9a0 [ 834.687076][T29304] ? constant_test_bit+0x12/0x30 [ 834.692132][T29304] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 834.698689][T29304] ext4_file_read_iter+0x2e4/0x380 [ 834.703998][T29304] ? ext4_file_read_iter+0x2e4/0x380 [ 834.709315][T29304] generic_file_splice_read+0x35c/0x500 [ 834.715077][T29304] do_splice_to+0xf2/0x130 [ 834.720378][T29304] ? add_to_pipe+0x1c0/0x1c0 [ 834.725264][T29304] ? add_to_pipe+0x1c0/0x1c0 [ 834.730572][T29304] splice_direct_to_actor+0x1b6/0x540 [ 834.737749][T29304] ? generic_pipe_buf_nosteal+0x20/0x20 [ 834.743907][T29304] do_splice_direct+0x161/0x1e0 [ 834.748927][T29304] do_sendfile+0x384/0x7f0 [ 834.753471][T29304] __x64_sys_sendfile64+0x12a/0x140 [ 834.759210][T29304] do_syscall_64+0xcc/0x3a0 [ 834.763743][T29304] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 834.770027][T29304] RIP: 0033:0x45af49 [ 834.774929][T29304] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.796476][T29304] RSP: 002b:00007f45dd604c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.805934][T29304] RAX: ffffffffffffffda RBX: 00007f45dd604c90 RCX: 000000000045af49 [ 834.813938][T29304] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 834.822458][T29304] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 834.830592][T29304] R10: 0000000008800000 R11: 0000000000000246 R12: 00007f45dd6056d4 [ 834.838620][T29304] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 0000000000000008 19:16:04 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) r4 = inotify_init() ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x8, 0x1, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x200000000009, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:05 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:05 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 835.005415][T29310] FAT-fs (loop1): Unrecognized mount option "Tos·Ã™1xf‡¹âÅÑÕu+4?émD»ÃLoppy" or missing value 19:16:05 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:05 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880000f) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy,\x00'/24]) 19:16:05 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 835.567588][T29369] FAT-fs (loop1): bogus number of reserved sectors [ 835.598456][T29369] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 835.612370][T29369] FAT-fs (loop1): Can't find a valid FAT filesystem [ 835.723074][T29369] FAT-fs (loop1): bogus number of reserved sectors 19:16:05 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 835.817104][T29369] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 835.826415][T29369] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)={0x101, 0x7, 0x4, 0x0, 0x100, {0x77359400}, {0x9, 0x0, 0x5, 0x8, 0x3, 0x0, "57b50edb"}, 0x0, 0x0, @userptr=0x80000001, 0x2, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x4}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x1, 0x0, [0x7ff, 0x549, 0x8000, 0xffffffc0, 0x7, 0x1ff, 0x4, 0x5c, 0x7f, 0x80000000, 0x6, 0xffffff81, 0x8, 0x2, 0x401, 0x5fc397c6]}, {0x10, 0x0, [0x0, 0x800, 0x0, 0x4, 0x0, 0x3, 0x8000, 0x80, 0x0, 0x8001, 0x5, 0x3, 0xac, 0x2, 0x1ca, 0x3]}, {0x18, 0x0, [0x0, 0x5, 0x0, 0x7, 0x19d, 0x0, 0x1, 0x8000, 0x20bdfca9, 0x9, 0xffffffff, 0x4, 0xfffffffe, 0x2, 0x7, 0x7]}, {0x0, 0x0, [0x0, 0x3d, 0x1, 0x80000000, 0x4, 0x7, 0x0, 0xafd, 0xadbd, 0xf78, 0x3ff, 0x401, 0x52, 0xffffffff, 0x1, 0x7]}, {0x16, 0x0, [0x0, 0x800, 0x6864, 0x3, 0x10000, 0x8, 0x400, 0x497, 0x7, 0x7ff, 0xfffffffe, 0x1, 0x3, 0x0, 0xfffffffd, 0x7]}, {0x4, 0x0, [0xffff, 0x7, 0xbd0c, 0xb9c, 0x8, 0xffffff00, 0x5, 0x3, 0x5, 0x3f, 0x0, 0x3ff, 0x8, 0x2, 0xfffffff9, 0x28]}, {0x1, 0x0, [0x7f, 0x7, 0x3f, 0x4, 0x80, 0x3f, 0x7f, 0x2, 0x9, 0x8, 0x70e362d3, 0x401, 0x20, 0x1ff, 0x9, 0x10001]}, {0x56, 0x0, [0x7f, 0xfffffff8, 0x5, 0xfffffffe, 0x5, 0x80, 0x6, 0x9, 0x8, 0x6, 0x5, 0xfffffff9, 0x5, 0x3f, 0x6, 0x1]}, {0x8, 0x0, [0xfff, 0x7, 0x1, 0x4c037e0a, 0x100, 0x0, 0x800, 0x919, 0x87d6, 0x5, 0x3, 0x81, 0x4, 0x6, 0x1ff, 0x8]}], r4, 0x1, 0x1, 0x288}}, 0x20) fdatasync(r3) 19:16:06 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000070b2adeeca04000000000000000d000000000000007b1fffffffffffff090000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000050000000000000004000000000000000000000000000000006d066de40000000000000000000000000000000000000000000000050000000000000000000100000000000400000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000002001001000"/260]) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000280)=0x10001) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) connect$x25(r0, &(0x7f0000000400)={0x9, @remote={[], 0x2}}, 0x12) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 836.062647][ T27] audit: type=1800 audit(1578942966.147:348): pid=29368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17089 res=0 19:16:06 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 836.160952][ C0] net_ratelimit: 11 callbacks suppressed [ 836.166800][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 836.170946][ T27] audit: type=1800 audit(1578942966.147:349): pid=29373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17089 res=0 [ 836.173423][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:16:06 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800010) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 836.229040][T29401] FAT-fs (loop1): bogus number of reserved sectors [ 836.328026][T29401] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 836.339315][T29401] FAT-fs (loop1): Can't find a valid FAT filesystem [ 836.401527][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 836.407983][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:06 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 836.523772][T29401] FAT-fs (loop1): bogus number of reserved sectors [ 836.560192][T29401] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 836.601402][T29401] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4000c2, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @random="110dee6288b7", 'ipvlan1\x00'}}) [ 836.831399][ T27] audit: type=1800 audit(1578942966.917:350): pid=29410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17089 res=0 [ 836.879734][T29440] FAT-fs (loop1): bogus number of reserved sectors [ 836.886346][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 836.886373][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 836.890936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 836.892425][ T27] audit: type=1800 audit(1578942966.917:351): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17089 res=0 [ 836.897896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 836.903770][T29440] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 836.938982][T29440] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:07 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 837.021910][T29440] FAT-fs (loop1): bogus number of reserved sectors [ 837.039739][T29440] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 837.056438][T29440] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:07 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800011) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5caf00c7a3dd2b15767fc9ae94fe0307a4d634b11e4145dafcfd28258453e9446faa5ae18e768400452548497d0a27adeee0edf09946c9f65061215dfa482242d63c2023611375bcd43dc486edba68e5be9e684af77b596f8d56090505df1e64676ca3c88f2da4f75db2321e53a45e3562ee68e35c4eabfcb61acbcd34829c620a9a87e1641fbb794221af0193cfcd56455e560eedbc8db405ea8e3ab310618f2ba187970df98b69612776f8a6f4c06bb776733b6832a6ed6de843761a282efa8f4337808cdb3e16c31213792c0eb128845c2ae935e1281f350d11f43"]) 19:16:07 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x0, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 837.361250][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 837.367682][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 837.441539][T29461] FAT-fs (loop1): Unrecognized mount option "ÕÊð z=Ò±WgüšéOà0zMcKä]¯ÏÒ‚XE>”Fú¥®çh@RT„—ТzÞîß ”lŸeߤ‚$-cÂ67[ÍCÜHnÛ¦Ž[é愯wµ–øÕ`P]ñæFvÊ<ˆòÚOuÛ#!å:EãV.æŽ5Äê¿Ëa¬¼ÓH)Æ ©¨~Aû·”"ð<üÕdUå`îÛÈÛ@^¨ã«1òºypߘ¶–woŠoL»wg3¶ƒ*nÖÞ„7a¢‚ï¨ô3xͳál1!7’ÀëˆE®“^óPÑC" or missing value 19:16:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="646f7331786374696fd960651f6f8e9589807b6b8ccfb26f6403b2187bb31afac050acca6e8a8f501f3d6e55bf65186436877164db7ce22c07bfee94fe29323608b9b6800bc673afb9d2c51139b7dd5b9c0ceb5dc870c9c0f2084244fd06a4e1d542ae707ad3c1f972c89f1b58054f9ae8ab3f1b"]) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000380)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r6, 0x40}, &(0x7f0000000100)=0x8) 19:16:08 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800003) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 837.948509][T29481] FAT-fs (loop1): Unrecognized mount option "dos1xctioÙ`eoŽ•‰€{kŒÏ²od²{³úÀP¬ÊnŠP=nU¿ed6‡qdÛ|â" or missing value [ 838.023536][T29487] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 838.039348][ T27] audit: type=1800 audit(1578942968.117:352): pid=29455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16801 res=0 19:16:08 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:08 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$IPC_RMID(r4, 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffff09000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000005000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000004ffffeb000000000000010000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000002001001000"/248]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 838.175453][ T27] audit: type=1800 audit(1578942968.167:353): pid=29464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16801 res=0 19:16:08 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800012) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:08 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x0, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 838.268094][T29481] FAT-fs (loop1): Unrecognized mount option "dos1xctioÙ`eoŽ•‰€{kŒÏ²od²{³úÀP¬ÊnŠP=nU¿ed6‡qdÛ|â" or missing value [ 838.440291][T29487] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:08 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800021) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:08 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000300)='./file0\x00', 0x410083, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000340)) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0xb, 0xfffffffb, 0x1, 0x4000, r0}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f0000000280)=0x6) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0xffff0001, 0x0, 0x0, 0x4}, 0x3c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:08 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) rt_sigtimedwait(&(0x7f0000000400)={0xffffffffffffff00}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @vlan={{0xc, 0x1, 'vlan\x00'}, {0x10, 0x2, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0xffffffffffffff85, 0x0, 0x20, &(0x7f0000000080)=ANY=[]) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000480)={0x0, 0xffe1}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000500)={r8, 0x7fffffff, 0x30}, 0xc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8210102}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) [ 838.884695][T29537] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 838.959269][ T27] audit: type=1800 audit(1578942969.037:354): pid=29542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17089 res=0 [ 839.036871][T29546] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 839.145029][ T27] audit: type=1800 audit(1578942969.227:355): pid=29542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17089 res=0 [ 839.182815][T29551] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:09 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:09 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:09 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) chdir(&(0x7f00000002c0)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x4200, 0xa9) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffff09000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000005000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000010000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000200100100000000000000000000000000000000000000000000000000000000000080000000000000000"]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000300)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r11, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:09 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800022) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:09 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x0, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 839.649344][ T27] audit: type=1804 audit(1578942969.727:356): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir781822002/syzkaller.hr2Cab/566/file0" dev="sda1" ino=16849 res=1 [ 839.702790][T29551] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 839.743025][ T27] audit: type=1804 audit(1578942969.727:357): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir781822002/syzkaller.hr2Cab/566/file0" dev="sda1" ino=16849 res=1 [ 839.924614][T29558] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 839.949601][ T27] audit: type=1800 audit(1578942970.027:358): pid=29578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16881 res=0 [ 840.084029][ T27] audit: type=1800 audit(1578942970.027:359): pid=29584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16881 res=0 19:16:10 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800023) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 19:16:10 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:10 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 840.715875][T29617] FAT-fs (loop1): bogus number of reserved sectors [ 840.743795][T29617] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:16:10 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x0, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:10 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800024) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 840.806078][T29617] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:11 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 840.994624][T29644] FAT-fs (loop1): bogus number of reserved sectors [ 841.001283][T29644] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 841.010616][T29644] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:11 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000280)={0x40000000}) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x80000000}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:11 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000c, 0x1010, r2, 0xcb32b000) setgid(r1) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x263, 0x0, 0x400, &(0x7f0000000080)={[{@fat=@gid={'gid', 0x3d, r1}}]}) [ 841.485254][T29665] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 841.521449][ C1] net_ratelimit: 12 callbacks suppressed [ 841.527300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 841.533469][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 841.553676][T29671] FAT-fs (loop1): bogus number of reserved sectors 19:16:11 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x0, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 841.598948][T29671] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:11 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800025) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 841.755626][T29665] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:16:12 executing program 1: prctl$PR_SET_PDEATHSIG(0x1, 0x29) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f7331781f8598719496cb2a"]) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$can_raw(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000280)=""/177, 0xb1}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f0000000380)=""/24, 0x18}], 0x9, &(0x7f0000000780)=""/41, 0x29}, 0x100) 19:16:12 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x0, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 842.205463][T29701] FAT-fs (loop1): Unrecognized mount option "dos1x…˜q”–Ë*" or missing value 19:16:12 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 842.400941][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 842.406906][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:16:12 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x24, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x80) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffff0900000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000050000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000100000000000400000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000002001001000"/256]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x4}, 0x8) 19:16:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x41) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 842.491647][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 842.491669][ T27] audit: type=1800 audit(1578942972.567:364): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16484 res=0 19:16:12 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 842.574560][ T27] audit: type=1800 audit(1578942972.567:365): pid=29698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16484 res=0 [ 842.640973][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 842.646760][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:12 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800026) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 842.739867][T29730] FAT-fs (loop1): bogus number of reserved sectors [ 842.750989][T29730] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 842.878066][T29730] FAT-fs (loop1): Can't find a valid FAT filesystem [ 843.120946][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 843.120996][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 843.126725][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 843.160001][T29750] FAT-fs (loop1): bogus number of reserved sectors [ 843.201059][T29750] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:16:13 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x0, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 843.341580][T29750] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @rose, 0x0, [@remote, @default, @netrom, @bcast, @rose, @null]}, &(0x7f00000000c0)=0xfffffffffffffcf1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) gettid() ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000002c0)={0x800, 0x0, 0x4, 0x6a6f7c9a8151a09f, 0x101, {}, {0x4, 0x8, 0xff, 0x3, 0x1, 0x3, "2345288a"}, 0xffff, 0xb51a21536e2e8b5, @fd, 0xabad, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000340)={0x35, "8847151d6ba37f925f0751d757f0c26813424e3479ac9b102930f8d694b57041", 0x20, 0x1, 0x7ff, 0x8, 0xd6497004a9b4e74d}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000280)={'veth0_to_team\x00', {0x2, 0x4e23, @rand_addr=0x7}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000400)={0x2, 'veth0_to_bridge\x00', {0x7}, 0x2}) set_robust_list(&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x7f, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@noalign='noalign'}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) 19:16:13 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800007) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:13 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x9) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000280), 0x4) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 843.600940][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:16:13 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800027) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 843.739138][T29770] FAT-fs (loop1): bogus number of reserved sectors [ 843.757038][T29770] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:13 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 844.156780][T29770] XFS (loop1): Invalid superblock magic number 19:16:14 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x100, 0x1) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1012c1, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffffa0b0a1391000dad45c090000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000050000000000000004000000000000000000000000000000000000000000000000000000000001000080000000000000050000000000000000000100000000000400000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000002001001000"/256]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000280)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x1f, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x6}, 0x3c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) 19:16:14 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 844.391109][T29770] FAT-fs (loop1): bogus number of reserved sectors [ 844.441200][T29770] FAT-fs (loop1): Can't find a valid FAT filesystem [ 844.528399][ T27] audit: type=1800 audit(1578942974.607:366): pid=29798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17372 res=0 19:16:14 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 844.561277][ T27] audit: type=1800 audit(1578942974.607:367): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17372 res=0 19:16:14 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0xfffffdf2, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}], [{@fowner_gt={'fowner>', r0}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0xb2, 0x1f, 0x3, 0x0, 0x7, 0x6, 0xff, 0x7, 0x7f, 0x7, 0x8, 0x1f, 0x0, 0x2, 0x101, 0xbf, 0x81, 0x7, 0x5, [], 0x0, 0x9}) 19:16:14 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800028) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:14 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:15 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800008) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:15 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000280)={0x16a80, "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"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000d000000000000007b1fffffffffffff0900000000000000000000000000000000000000000000000000000000000000002000000000000009000000000000000500000000000000040000000000000000000000000000000000000000000000000000000000eb0000000000000000000500000000000000000001000000000004000000000000001a00000000000000000000000000000000000000000000000000000000000000060000000000000000000000000020000000000000000000000000000000000000000000000000000000e15c18a89d00"/254]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 845.386454][ T27] audit: type=1800 audit(1578942975.467:368): pid=29854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16753 res=0 19:16:15 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 845.530061][ T27] audit: type=1800 audit(1578942975.527:369): pid=29845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16753 res=0 19:16:15 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800029) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:15 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000300)) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[], 0x0) r4 = socket(0x4, 0x80000, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x10002, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0xd4ee4d85a747425e) syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffffeeffffffffffffff0000000000000000000000000000000000000000000000000000000000000000090000000000000005000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000010000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000020e1ec7377549a7600c2c92ce2dc4dfb01001000"/271]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x4, r9}, 0x3c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:16 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="646f713178666c6d7070792c0060dd3038e9cfb46dd2d1db9d5942b896ac2d8847f736b8c67ef8d648e6378b21149f1e5ed4911e6c878091b73d79489605034f1fbd12990c6bd1e91d8f4e849f466fa1727618f0ef14795a65a93a69b53a8459d5f43a78890d0e52d2183cc257de2298ae1efe99cfc58911809bb1cea22eb7ef01743b19dd4fbbe34403470fab2a38f3fed5d3d8a65ba733b8027632b9eabdc24c347f6eaae770caec24214678e5585ca09a64687aa6ff3f75cc6390a56e858e7131108485eee523ca27084e8bfe8acf0baa72f9fcf3267f8aa6ffda6da3c0bc66d0ed257d677977dbfb4ec1bf9b0e8cd3"]) 19:16:16 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880002a) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:16 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800009) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 846.428900][T29911] FAT-fs (loop1): Unrecognized mount option "doq1xflmppy" or missing value 19:16:16 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 846.560953][ C0] net_ratelimit: 9 callbacks suppressed [ 846.560962][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 846.572323][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 846.588682][T29911] FAT-fs (loop1): Unrecognized mount option "doq1xflmppy" or missing value 19:16:16 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/184, &(0x7f0000000140)=0xb8) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0xffffffffffffffb2, 0x0, 0x8000, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0]) [ 846.811678][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 846.818219][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:17 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x4}, {0x9, 0x5, 0x4}, {0x2, 0x10000, 0x4, [], 0x1808}, {0x400000000006, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:17 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x880000a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 847.280962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 847.282196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 847.286756][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 847.293156][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 847.335074][ T27] audit: type=1800 audit(1578942977.417:370): pid=29943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17381 res=0 19:16:17 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 847.407460][ T27] audit: type=1800 audit(1578942977.467:371): pid=29934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17381 res=0 19:16:17 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880002b) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:17 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:17 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffff090000000000001000000000000000000000000000000000000000000000000000000000000000000900000000000000050000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000100000000000400000000000000000000100000000000000000000000000000000000000000000000000000000006000000000000000000000000002001001000"/256]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="48000000100094426908e87eb49ef19c0288ec0ef589041f769f564050458d3f791622c7196eaa42c2d33fe53e6fc2a339d6744f40209fc9ac5d9901257e9c1bb6a0a14425a97f300a411f712613106f4f200a335dcc680212da6f582621a81796572fefdf59c3936d0590b9", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c000100766c616e000000001000020004000300080001000000000008000500", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:17 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x880000b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 848.043056][T29997] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:16:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="646f733178666c6f7070792c005ec389b7726f222ffe5f"]) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x3, @empty}}, 0x1e) [ 848.282121][ T27] audit: type=1800 audit(1578942978.367:372): pid=29989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17352 res=0 [ 848.384565][T30009] FAT-fs (loop1): bogus number of reserved sectors [ 848.410457][T30013] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:16:18 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:18 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880002c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 848.440330][T30009] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 848.480994][T30009] FAT-fs (loop1): Can't find a valid FAT filesystem [ 848.526345][ T27] audit: type=1800 audit(1578942978.397:373): pid=29995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17352 res=0 [ 848.597439][T30009] FAT-fs (loop1): bogus number of reserved sectors 19:16:18 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x88, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 848.641415][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 848.647637][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 848.652269][T30009] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 848.675999][T30009] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:18 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:19 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr="e6a1b6c9c01a20955dca1bbbd82414a8", 0x8}}, 0x5, 0x4, 0x40, 0xe4d, 0x4, 0x2, 0x40}, &(0x7f0000000400)=0x9c) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f733178666c507070792c00f57c95c27436c63c06000000ae0ed3a8cb31"]) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x105000, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newrule={0x6c, 0x20, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x20, 0x10, 0x0, 0x4, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, [], 0x21}}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008094) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000300)) [ 849.039902][ T27] audit: type=1800 audit(1578942979.117:374): pid=30021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16754 res=0 19:16:19 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880002d) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 849.090477][T30050] FAT-fs (loop1): Unrecognized mount option "dos1xflPppy" or missing value 19:16:19 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x880000c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 849.174715][T30052] FAT-fs (loop1): Unrecognized mount option "dos1xflPppy" or missing value [ 849.177148][ T27] audit: type=1800 audit(1578942979.117:375): pid=30024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16754 res=0 19:16:19 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f733178666c6f7070792c40e56a3ece59f934a1972aa1526b82f564ec8dc2ef942c648d9263"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000001600)=0xff86) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001640)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x38, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xcd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4000}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000300)=[{&(0x7f0000000100)="04c5c27ee2552dc26db42175e4e16a99b19d3811b55769ad169ae97246b5d70e48926333c0e03459d19cc585e443e887ea1453687336eb4615c549406607a17d5f6e4c98071f234b0434aba8ce5450bb12f712", 0x53, 0x7ff}, {&(0x7f0000000180)="d9830742c002416b40b1cf0705cd127919a682557f59364a21549f3e2c6b45e514ab5cc7f6000b19a23785be570e502f26b2c9fbfabd6f36818d36454a30dc7ea6b0e9cbd9d9cf3a79fe", 0x4a, 0x4}, {&(0x7f0000000200)="cc1a940f6a6fb5243f0b5a44abc34b0ea63d2b9790addc9181", 0x19, 0x1}, {&(0x7f0000000240)="0177368e69061a090eb8c65d3f92a2c333d41821121debddef1374981477bd3d0cc3ca6a8578e90fb57ad9cb6f1a0e0bafd2dbbe896f7dd3939a2515d1e7bdcfc8ffd98f5520f29347cf5e8d6f0f1b1957e5203ed239b9d52b3807e2299141d5a03535555a38d9dd7b0481042758c270c2676b5c5dfe88607ef420d00462fe15e704e02ec722958caaa596db5f81f26da1c8fc33dc90e49c2d9c7177c6054168a2da83ce46bdf2186628bc5dc05dadb0", 0xb0, 0x240}, {&(0x7f0000000400)="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", 0x1000, 0x6}, {&(0x7f0000001400)="45825ff358bbc7d6c8aac75d8eccb1ede9d7bb1c829eb1ec57d33bc03b14b5215427340ce637aa35bef1310c10456c5d5a34e1f25e979d6f201205e88feaf9a2c5dcc681467cd4b40f5d6e5283cefa738582b5431e8af66da41d169206a7fc5a9808844fa3db883d56de704fdb088d85ed913e9770b3bb166fd5b09acf848184d27215d05617a9eda204290a7db46bce3d9e837ed6bb529518d389642b8c0edd1b6ca5d6624510fe605062edf63b7f16d46723c23a0ea0edc03b8dd6939369b051e1ad5405e832b608874ca9b2b66e127704a2776e97b8c14c2a0de7744e0054cee59aa78c621d9b164959ea384f9807c754add168724ac5", 0xf8, 0x1ff}], 0x10000, &(0x7f0000001680)={[{@sbsector={'sbsector', 0x3d, 0x7}}, {@check_relaxed='check=relaxed'}, {@session={'session', 0x3d, 0x3b}}, {@sbsector={'sbsector', 0x3d, 0x9}}, {@uid={'uid'}}, {@utf8='utf8'}, {@utf8='utf8'}, {@map_off='map=off'}, {@sbsector={'sbsector', 0x3d, 0x3}}], [{@uid_gt={'uid>', r0}}, {@obj_user={'obj_user', 0x3d, 'msdos\x00'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 19:16:19 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:19 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x3, [{0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 849.744181][ T27] audit: type=1800 audit(1578942979.827:376): pid=30063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16658 res=0 [ 849.789915][T30084] FAT-fs (loop1): Unrecognized mount option "@åj>ÎYù4¡—*¡Rk‚õdìÂï”" or missing value [ 849.863311][T30084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 849.895099][ T27] audit: type=1800 audit(1578942979.857:377): pid=30068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16658 res=0 19:16:20 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880002e) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 850.085178][T30084] FAT-fs (loop1): Unrecognized mount option "@åj>ÎYù4¡—*¡Rk‚õdìÂï”" or missing value [ 850.101926][ T27] audit: type=1800 audit(1578942980.187:378): pid=30082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16610 res=0 [ 850.155070][T30093] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 850.168151][ T27] audit: type=1800 audit(1578942980.207:379): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16610 res=0 19:16:20 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x90c80, 0x0) accept4$rose(r3, &(0x7f00000002c0)=@full={0xb, @dev, @remote, 0x0, [@bcast, @default, @null, @bcast, @default, @bcast]}, &(0x7f0000000300)=0x40, 0x40c00) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x6, [], 0x189}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x9}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x4, 0x0, 0x0, r8, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 850.313287][ T27] audit: type=1800 audit(1578942980.397:380): pid=30072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=16754 res=0 19:16:20 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1f) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xfffffffffffffeaf, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/13]) [ 850.402177][ T27] audit: type=1800 audit(1578942980.417:381): pid=30067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16754 res=0 19:16:20 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x880000d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:20 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880002f) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:20 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:20 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e24, 0x7ff8, @rand_addr="3be694a338212d24f4b12d79aace5157", 0x7f}, {0xa, 0x4e22, 0x4fc7, @remote, 0x2}, 0x1, [0x1ff, 0x7fff, 0xe2, 0x9, 0x1, 0x461813ef, 0x25a, 0x7]}, 0x5c) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000003c0)=""/44) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$inet6(r5, &(0x7f0000000600)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000000640)=0x1c) sendfile(r2, r2, 0x0, 0x8800000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000580), &(0x7f00000005c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) 19:16:20 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0x0, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:21 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) syz_open_procfs(r7, 0x0) process_vm_readv(r7, &(0x7f0000000340)=[{&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000002880)=[{&(0x7f0000001500)=""/206, 0xce}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000002600)=""/192, 0xc0}, {&(0x7f00000026c0)=""/66, 0x42}, {&(0x7f0000002740)=""/226, 0xe2}, {&(0x7f0000002840)=""/47, 0x2f}], 0x7, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) syz_open_dev$vcsu(&(0x7f0000002900)='/dev/vcsu#\x00', 0x7f, 0x80) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:21 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800030) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@usefree='usefree'}]}) 19:16:21 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x880000f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:22 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0x0, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 851.950833][T30198] FAT-fs (loop1): bogus number of reserved sectors 19:16:22 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x0, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 852.011037][T30198] FAT-fs (loop1): Can't find a valid FAT filesystem [ 852.078200][T30198] FAT-fs (loop1): bogus number of reserved sectors [ 852.099168][T30198] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffeffffffffffffc, 0x375, 0x0, 0x2fdac119499cc039, &(0x7f0000000000)=ANY=[@ANYBLOB="61707072616973655f747970653d696d617369672c0016ffa555576976f82600dcd5e40a1909ed1eac2dfca44cdddd84861631aaec9773a1cecab8670339eac43ec8"]) 19:16:22 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800090) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x204000, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @multicast1}, &(0x7f0000000140)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000280)={0x2, 'rose0\x00', {0x80000000}, 0x401}) r7 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000240)="7f7b", 0x2, r7) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c000100766c616ec50014001000d357a76daa5660e101000000000008000500", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) [ 852.800938][ C0] net_ratelimit: 14 callbacks suppressed [ 852.800948][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 852.812839][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:16:22 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001904000004000000000000000d00008f246100f32d6938c19100000000007b1fffffffffffff09000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000005000000000000000400000000f6ff0000000000000000000000000000000000000000000000000000000000000000000500000000000000000001000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000020010010000000000000000000000000000000000000000000000000ff010000"]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:23 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0x0, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 852.990067][T30240] FAT-fs (loop1): bogus number of reserved sectors [ 853.024296][T30240] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 853.040955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 853.046769][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 853.064910][T30252] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:23 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:23 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800091) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:23 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x0, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 853.196054][T30240] FAT-fs (loop1): Can't find a valid FAT filesystem [ 853.269324][T30263] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 853.520947][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 853.520953][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 853.520978][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 853.526851][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 853.546348][T30240] FAT-fs (loop1): bogus number of reserved sectors [ 853.575469][T30252] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:23 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x0, 0x10000, 0x100000004}, {0x6, 0x120000000000000, 0x1000, [], 0x100}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 853.707595][T30240] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 853.772425][T30240] FAT-fs (loop1): Can't find a valid FAT filesystem [ 853.857315][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 853.857334][ T27] audit: type=1800 audit(1578942983.937:388): pid=30280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17089 res=0 [ 853.957434][ T27] audit: type=1800 audit(1578942983.937:389): pid=30270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17089 res=0 19:16:24 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0x0, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:24 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800097) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000240)={0x5, 0x9, 0x2, 0x0, 0x0, [{{r2}}, {{r0}, 0x7}]}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f00000000c0)=0x4d6, 0x4) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f00800000db000800792c00"]) 19:16:24 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800012) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 854.301377][T30315] FAT-fs (loop1): Unrecognized mount option "do" or missing value 19:16:24 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x0, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 854.409361][T30321] FAT-fs (loop1): Unrecognized mount option "do" or missing value 19:16:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f733178ba666c6f7026480db2"]) [ 854.726726][ T27] audit: type=1800 audit(1578942984.807:390): pid=30320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17041 res=0 [ 854.824825][ T27] audit: type=1800 audit(1578942984.837:391): pid=30312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17041 res=0 19:16:25 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffff090000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000050000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000100000000000400ffffffff00000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000020010010000000000000000000000000000000000000000000000000ffffffe700ae0fffffffffffff00e28e445de2ed63c23fdcd9"]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = socket(0x10, 0x803, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) syz_open_procfs(r5, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000280)='net/packet\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$binfmt_aout(r4, &(0x7f0000000500)={{0x0, 0x1, 0x4b, 0x2cb, 0x10a, 0x7f, 0x339, 0x5}, "1881cdcea2dc8121f68aaeb890530a21746db86e2c15167f11dbc18524758ba77b8a472fd72f40", [[], [], [], [], [], []]}, 0x647) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 854.871105][T30344] FAT-fs (loop1): Unrecognized mount option "dos1xºflop&H ²" or missing value [ 854.880940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 854.886734][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:16:25 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880009d) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 855.041290][T30344] FAT-fs (loop1): Unrecognized mount option "dos1xºflop&H ²" or missing value 19:16:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xa) 19:16:25 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0x0, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:25 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x0, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 855.615705][T30369] FAT-fs (loop1): bogus number of reserved sectors 19:16:25 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d8f431b92188eca7a4ed93b4e56d9b865000000000000007b1fffffffffffff090000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000050000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000100000000000400000800000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000002001001000"/272]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0xffffffffffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000280)={r6}) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f00000002c0)='netpci0\x00') 19:16:25 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800023) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 855.748827][T30369] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 855.819106][ T27] audit: type=1800 audit(1578942985.897:392): pid=30360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17041 res=0 [ 855.851287][T30369] FAT-fs (loop1): Can't find a valid FAT filesystem [ 855.946714][ T27] audit: type=1800 audit(1578942985.957:393): pid=30356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17041 res=0 19:16:26 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x880009f) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 856.058451][T30369] FAT-fs (loop1): bogus number of reserved sectors [ 856.081061][T30369] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 856.121964][T30369] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:26 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x4c, 0x4, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) syz_mount_image$hfs(&(0x7f0000000300)='hfs\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0x3, &(0x7f0000000640)=[{&(0x7f0000000500)="b3fb29d717ab5164484aab288b43f31c817e5fd88e02f9507fc0e1f3bf6fc6fcdeb62de4022b20b967872e8caa5c132b4c2ffbe005ca1e15f8aa4e5444873bd40f8e29897e8ead32d8fd269007bc0ce3f642bc77dba72a1823dbf48614d60da213d8bc2e1eeaedb0a6455fec7d1187ffd2e3560a50b99dd1e52e7548a1f99bb76cc21f61149a69fd26b86fa18443f40f267275318fc9c35d7bd4ab3a22745decc2", 0xa1, 0x2c54c321}, {&(0x7f0000000380)="8b0c667026cf7c60fe359ae714d4f6aeda0b996aba6303f20514ee3b45a7a24887a00d04710d3f806bb3dd90bccc811eb254b5fa32b0f7d361e56e2c98b1c13b9803a4", 0x43, 0x1ff}, {&(0x7f00000005c0)="9c73696fdf3e6d24d8674b6d44e8b65b07b4b138b2ca7e8d862901a574782b73a4f2ccab444979762404f309fbc999153c2345dfcdf8ddfb31bb0da2d968e58ffdfe009591e780ebc6d7dc0fa2538f98c480ae3d19fabc56aad29c5ce1117a3cb3ff187e36d1e5995662af585e34da80", 0x70, 0x10000}], 0x400, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@creator={'creator', 0x3d, "54f0907b"}}, {@codepage={'codepage', 0x3d, 'default'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@subj_type={'subj_type', 0x3d, 'self:{'}}]}) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:26 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0x0, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xfffffffffffffffd, 0xffffffffffffff5f, 0x0, 0x0, &(0x7f0000000040)={[{@dots='dots'}]}) mknod(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff73, 0x3) 19:16:26 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x0, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 856.734623][ T27] audit: type=1800 audit(1578942986.817:394): pid=30409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17041 res=0 19:16:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f733178765a01b322cf0ba2c6c9e6ebd2f54ff17902f8d86373696a232f054951"]) [ 856.906811][ T27] audit: type=1800 audit(1578942986.837:395): pid=30413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17041 res=0 [ 856.912991][T30440] FAT-fs (loop1): Unrecognized mount option "dos1xvZ³"Ï ¢ÆÉæëÒõOñyøØcsij#/IQ" or missing value 19:16:27 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x88000a5) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 856.973704][T30419] hfs: unable to parse mount options [ 856.988701][T30440] FAT-fs (loop1): Unrecognized mount option "dos1xvZ³"Ï ¢ÆÉæëÒõOñyøØcsij#/IQ" or missing value 19:16:27 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800030) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000500)=@v1={0x1000000, [{0x2, 0x8}]}, 0xc, 0x2) getpeername$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40c0}, 0xd) creat(&(0x7f0000000080)='./file0\x00', 0x67) [ 857.516468][ T27] audit: type=1800 audit(1578942987.597:396): pid=30449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17041 res=0 [ 857.539624][T30463] FAT-fs (loop1): bogus number of reserved sectors 19:16:27 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:27 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x88000b1) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 857.561015][T30463] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 857.634019][T30463] FAT-fs (loop1): Can't find a valid FAT filesystem [ 857.701083][ T27] audit: type=1800 audit(1578942987.617:397): pid=30451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17041 res=0 19:16:27 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x0, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 857.784962][T30463] FAT-fs (loop1): bogus number of reserved sectors [ 857.855340][T30463] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code 19:16:28 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x88000be) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 857.980936][T30463] FAT-fs (loop1): Can't find a valid FAT filesystem [ 858.170973][ C1] net_ratelimit: 14 callbacks suppressed [ 858.170983][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 858.182546][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@fat=@showexec='showexec'}]}) [ 858.412509][T30507] FAT-fs (loop1): bogus number of reserved sectors [ 858.419114][T30507] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:28 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800031) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:28 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2363d1e98ae60d05) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00') r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r5 = dup2(0xffffffffffffffff, r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x40, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10c}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="782687229a37e31786329cd9a08e9836dbec06980e5cd8302dc2a0a4b012e77b6636ae9604fc83dc6d31d71525bb749d", @ANYRES16=r3, @ANYBLOB="00012abd7000fbdbdf25050000000c00060002000000000000000c000600040000000000000008000100000000000c0003000400000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x42009}, 0x800) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r7 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r7, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000280)=ANY=[], 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r6, r8, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004100000000000000d000000000000007b1fffffffffffff09000000000000000000000000000000000000000000000000000000040000000000000000000000090000000000000005000000000000000400000000000000000000000000000008000000000000000000000000000000000000000000000005000000000000000000010000000000040000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000200100100000000000000000000000000000000000000000000000000000001000"/253]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) sendfile(r8, r8, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:28 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x88000f0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f7331d4666c6f7070d52c00c4697568414feca584c28477decffa786231f900005a89da5dcd61d8145ba2b61f41a5bd6f"]) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x204000, 0x40) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000240)={0x7f, 0x275d, 0x54a45489, 0x100}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @vlan={{0xc, 0x1, 'vlan\x00'}, {0x10, 0x2, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}}, 0x0) fdatasync(r0) 19:16:28 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:28 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 858.893622][T30528] FAT-fs (loop1): Unrecognized mount option "dos1ÔfloppÕ" or missing value [ 858.972887][T30542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 859.041465][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 859.048064][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:16:29 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fff0900ffffff0900000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000050000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000100000000000400000000000000000000000000000000000000000000800000000000000000000000000000000006000000000000000000000000002001001000"/255]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 859.101938][T30528] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:16:29 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800300) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 859.208720][T30528] FAT-fs (loop1): Unrecognized mount option "dos1ÔfloppÕ" or missing value [ 859.280970][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 859.286772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 859.390628][T30572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 859.453779][T30542] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:16:29 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000003c0)=0xb, &(0x7f0000000200)=0xffffff2e) socket$kcm(0x10, 0x7, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = accept4$tipc(r1, &(0x7f0000000280)=@name, &(0x7f00000002c0)=0x10, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) syz_open_procfs(r5, 0x0) r6 = getpgid(r5) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0xfe4e, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x400000, 0x1f}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) fcntl$setstatus(r7, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 859.760961][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 859.760967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 859.760992][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 859.766868][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffff44, 0x0, 0x4040000, &(0x7f0000000080)={[{@nodots='nodots'}, {@dots='dots'}, {@fat=@quiet='quiet'}, {@fat=@nfs='nfs'}, {@dots='dots'}, {@fat=@check_normal='check=normal'}, {@nodots='nodots'}]}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80, 0x0) futimesat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}) 19:16:30 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800032) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:30 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 860.046115][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 860.046133][ T27] audit: type=1800 audit(1578942990.127:400): pid=30573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17249 res=0 19:16:30 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 860.164217][ T27] audit: type=1800 audit(1578942990.157:401): pid=30577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17249 res=0 19:16:30 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800500) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:30 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x81008008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x35, 0x7, 'system_u:object_r:systemd_passwd_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r5, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000280)=ANY=[], 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000280)={'bridge0\x00', {0x2, 0x4e22, @remote}}) sendfile(r4, r6, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r9 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000000000000, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r9, 0x4, 0x42000) sendfile(r6, r6, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xffffffa1, 0x0, 0x1000008, &(0x7f0000000040)=ANY=[@ANYBLOB="646573317806006f00"]) [ 861.064419][ T27] audit: type=1800 audit(1578942991.147:402): pid=30620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17391 res=0 19:16:31 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800033) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:31 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 861.110666][T30636] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:16:31 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800600) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 861.181894][ T27] audit: type=1800 audit(1578942991.147:403): pid=30622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17391 res=0 19:16:31 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 861.598521][T30636] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 861.838450][ T27] audit: type=1800 audit(1578942991.917:404): pid=30638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16577 res=0 19:16:31 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 861.950817][ T27] audit: type=1800 audit(1578942991.947:405): pid=30669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16577 res=0 19:16:32 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800700) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:32 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0xbba4542c6a9e61b9, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[], 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000000f400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendfile(r6, r9, 0x0, 0x4000000000000008) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r12 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r12, 0x4, 0x42000) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000002c0)=0x1f) sendfile(r3, r3, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 862.136060][ T27] audit: type=1800 audit(1578942992.027:406): pid=30666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17399 res=0 19:16:32 executing program 1: r0 = getuid() r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @vlan={{0xc, 0x1, 'vlan\x00'}, {0x10, 0x2, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x2cdd}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}], [{@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash='dont_hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x54, 0x32, 0x63, 0x0, 0x0, 0x37, 0x57], 0x2d, [0x51, 0xfc], 0x2d, [0x37, 0x32, 0x30, 0x34], 0x2d, [0x9af6cf82db5976cb, 0x7f, 0x78, 0x65], 0x2d, [0x39, 0x33, 0x66, 0x38, 0x66, 0x63, 0x65, 0x38]}}}, {@euid_gt={'euid>', r0}}, {@euid_eq={'euid', 0x3d, r0}}, {@obj_user={'obj_user', 0x3d, 'dos1xfloppy'}}, {@uid_eq={'uid', 0x3d, r6}}]}) 19:16:32 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 862.296145][ T27] audit: type=1800 audit(1578942992.097:407): pid=30660 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17399 res=0 19:16:32 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800034) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 862.405322][T30688] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 862.513966][T30696] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:32 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 862.588070][T30701] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 862.600378][T30706] FAT-fs (loop1): Unrecognized mount option "permit_directio" or missing value [ 862.657386][T30696] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 862.671677][T30714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 862.797226][T30701] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 862.893629][ T27] audit: type=1800 audit(1578942992.977:408): pid=30698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17393 res=0 19:16:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="32039ed7c375b5637070792c00"]) unlink(&(0x7f0000000080)='./file0\x00') r0 = socket(0x10, 0x803, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=0x14) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x3}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$nfs4(&(0x7f00000002c0)='nfs4\x00', &(0x7f0000000300)='./file0\x00', 0x100, 0x1, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x1000}], 0x80000, &(0x7f0000000380)='veth0_virt_wifi\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000001400)={0x4, 0x1, 0x6, "ab250f28fb82140a3bbfbed01356f9f9d4b030f15ed0d6970ac39b8b7cc019a7", 0x34324142}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file1\x00', 0x8, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001440)=[{0x100, 0x10f, 0x8, "1c7e3a60b2e1acd20f5d0be30421678ef717589eddd0ae3eee2e6298ee4a9af2cc75a8f846882a188e581bb6b1dd995ef001a6a6d510a886f7b12ab4f82efb8d6dc15c4471c1c06af636e6abc7aa4d4ae4f3daa25502af0d89261a93182d06693d34ba2bf69968019656aacb1980f76880c8621dedff5c24bf01035aa9180abcffe4a2a3bc87a90648f3dd314dc37304bf8c76c6d98c58b8993937ab779477522bb83e099ca5359ca56e2b954b504123a752a5684d1621313f2bc7cce9ddb37d67e14865dc104d8792496b94882e6bbdd992f36889efb13d69bf6ee17ccfc8ebf6edb31960d2db6583c451268b"}], 0x100}}], 0x1, 0x4) 19:16:33 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000bf0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffff090000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000050000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000100000000000400000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000002001001000"/256]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:33 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800900) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 863.033507][ T27] audit: type=1800 audit(1578942992.977:409): pid=30689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17393 res=0 19:16:33 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 863.200992][ C0] net_ratelimit: 12 callbacks suppressed [ 863.201002][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 863.213639][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 863.221115][T30737] FAT-fs (loop1): Unrecognized mount option "2ž×Ãuµcppy" or missing value 19:16:33 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 863.401913][T30737] FAT-fs (loop1): Unrecognized mount option "2ž×Ãuµcppy" or missing value [ 863.441193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 863.447025][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:33 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800035) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:33 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}], [{@fowner_lt={'fowner<', r0}}, {@subj_role={'subj_role', 0x3d, 'dos1xfloppy'}}, {@subj_type={'subj_type', 0x3d, 'ppp1%selflo\'@$-self{vboxnet0security)mime_typekeyringmime_typeeth1\'wlan1['}}, {@obj_user={'obj_user', 0x3d, '\x98\'@{trusted\'posix_acl_access'}}]}) 19:16:33 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffff0900000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000500000000000000040000000000000000000000000093e40220690000000000000000000000000000000000000000000000000000050000000000000000000100000000000400000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000002001001000"/261]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 863.807989][T30780] FAT-fs (loop1): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 863.920943][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 863.920962][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 863.926719][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:16:34 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800a00) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:34 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:34 executing program 1: r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0xc0000) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 19:16:34 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x3, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 864.396307][T30806] FAT-fs (loop1): bogus number of reserved sectors [ 864.402944][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 864.402979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 864.435583][T30806] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 864.445848][T30806] FAT-fs (loop1): Can't find a valid FAT filesystem [ 864.549331][T30813] FAT-fs (loop1): bogus number of reserved sectors [ 864.560772][T30813] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 864.593158][T30813] FAT-fs (loop1): Can't find a valid FAT filesystem 19:16:34 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:34 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_procfs(r0, 0x0) getpriority(0x0, r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @null}, 0x1c) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="646f733178846c6f7037012c00ee4596d0379bd40eeea25585dd20d762585f5d778ad917c26a555bc6f20257672367ec02c55705e9ee0ecf87ebbf59b2d5b4e0ed44cc50b5624815bcaacdae335e862ef3e248a49c49c0e182e8e36fcb2ba27def272261728d1f3093269cc1440bb055693fd819ac41b149d9d717e12ffddd62cecd3bc8d04ed47e0a309cb0ef36bd666d66bb8a0c977a42826e546e704604e6c0fd49fc3a48e8953f5ba23bb1af952f6cb28c3ff62d237258324a4b93df95067ca0b7928b5dd8fe0e9653303ee3dbdfc90291c97fdd283fc0d4"]) 19:16:34 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x286}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:34 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800b00) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:35 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800036) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 865.004183][T30832] FAT-fs (loop1): Unrecognized mount option "dos1x„lop7" or missing value [ 865.186753][T30832] FAT-fs (loop1): Unrecognized mount option "dos1x„lop7" or missing value [ 865.281419][ C0] protocol 88fb is buggy, dev hsr_slave_0 19:16:35 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:35 executing program 1: restart_syscall() syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6489666c6f7070792c00000000"]) 19:16:35 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x0, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 865.640527][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 865.640544][ T27] audit: type=1800 audit(1578942995.717:416): pid=30846 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17414 res=0 [ 865.777901][ T27] audit: type=1800 audit(1578942995.747:417): pid=30856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17414 res=0 19:16:35 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800c00) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:36 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000380)="275bfd249990009a50f53cfc3e69a509fa11ae7c943e0aa20d41c8fd3be4735b7218ecc345f7d03c8df8fde63db5043a19392beccca63e74006183c8c9d4a280a5b17e66372c3b71", 0xfffffe6a, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x8, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0x9d0000, 0x0, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x9c0904, 0x9857, [], @value64=0x6}}) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000300)={0x1, 0x0, {0x33, 0x10, 0xa, 0x1d, 0x9, 0x9, 0x5, 0x98, 0xffffffffffffffff}}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000000000000ff0f000000000000000000001900000004000000000000000d000000000000007b1fffffffffffff090000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000050000f0f6992b5df60400000000000400000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000010000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000200100100000000000000000000000000000000000000000000000000000000000343c653b838ee078cc362805acdc69619243db333b5f89aaae3cd044aa464109442c72904fae33d030a711f0e979bfbff4d1081496ad255c1c32293c2bdb8b3cffd33693e737b761498dd0c0ed56f493c8"]) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000340)={0x0, r0, 0x96, 0x7, 0x8, 0x6}) fcntl$setstatus(r5, 0x4, 0x42000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x701327183fbdb1cf, r10, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 865.873623][T30877] FAT-fs (loop1): Unrecognized mount option "d‰floppy" or missing value 19:16:36 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800037) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:36 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 866.288296][T30892] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 866.655564][ T27] audit: type=1800 audit(1578942996.737:418): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17395 res=0 19:16:36 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x0, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 866.766312][ T27] audit: type=1800 audit(1578942996.767:419): pid=30897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17395 res=0 [ 866.810421][T30916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:16:37 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800d00) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:37 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:37 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a49", 0xb, 0x0, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0x0, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:37 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1305) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800038) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c0000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 867.592935][ T27] audit: type=1800 audit(1578942997.677:420): pid=30933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17420 res=0 [ 867.733219][ T27] audit: type=1800 audit(1578942997.767:421): pid=30926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17420 res=0 [ 867.766588][T30946] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:16:37 executing program 2: socket$kcm(0x11, 0xa, 0x300) r0 = dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) sendto$llc(r2, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x19, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x5, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:38 executing program 3: dup(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0"], 0x4) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800f00) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 19:16:38 executing program 4: socket$kcm(0x11, 0x0, 0x300) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x7, &(0x7f0000000200)=0x1) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="b433e0727a822d50e23a498b80528d16ed8629e4be6c", 0x16, 0x800, &(0x7f00000001c0)={0x1a, 0x323, 0x18, 0x3f, 0xde, 0x80, @dev={[], 0x16}}, 0x10) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb2463d91fe96964c6"], 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7fffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)={0x8, 0xfff, 0x0, 0x0, 0x4, [{0xd, 0xffffffffffff1f7b, 0x9}, {0x9, 0x5, 0x4}, {0x0, 0x10000, 0x4}, {0x6, 0x120000000000000, 0x1000}]}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000253e9115170000001c140000f40000014000000008000900000000005787358eb33c06c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d94a254c000000"], 0x1}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x2c) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 868.096599][T30967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 868.255589][T30950] ================================================================== [ 868.263981][T30950] BUG: KCSAN: data-race in __delete_from_page_cache / invalidate_inode_pages2_range [ 868.273323][T30950] [ 868.275639][T30950] read to 0xffff888128e3ecb8 of 8 bytes by task 30968 on cpu 0: [ 868.283273][T30950] invalidate_inode_pages2_range+0x52/0xbb0 [ 868.289168][T30950] iomap_dio_rw+0x540/0x9a0 [ 868.294176][T30950] ext4_file_read_iter+0x2e4/0x380 [ 868.299276][T30950] generic_file_splice_read+0x35c/0x500 [ 868.304805][T30950] do_splice_to+0xf2/0x130 [ 868.309210][T30950] splice_direct_to_actor+0x1b6/0x540 [ 868.314573][T30950] do_splice_direct+0x161/0x1e0 [ 868.319752][T30950] do_sendfile+0x384/0x7f0 [ 868.324151][T30950] __x64_sys_sendfile64+0x12a/0x140 [ 868.329331][T30950] do_syscall_64+0xcc/0x3a0 [ 868.333826][T30950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 868.339692][T30950] [ 868.342004][T30950] write to 0xffff888128e3ecb8 of 8 bytes by task 30950 on cpu 1: [ 868.349707][T30950] __delete_from_page_cache+0x1d8/0x4a0 [ 868.355242][T30950] invalidate_inode_pages2_range+0x757/0xbb0 [ 868.361198][T30950] iomap_dio_rw+0x540/0x9a0 [ 868.365700][T30950] ext4_file_read_iter+0x2e4/0x380 [ 868.370794][T30950] generic_file_splice_read+0x35c/0x500 [ 868.376318][T30950] do_splice_to+0xf2/0x130 [ 868.380717][T30950] splice_direct_to_actor+0x1b6/0x540 [ 868.386067][T30950] do_splice_direct+0x161/0x1e0 [ 868.390898][T30950] do_sendfile+0x384/0x7f0 [ 868.395730][T30950] __x64_sys_sendfile64+0x12a/0x140 [ 868.400910][T30950] do_syscall_64+0xcc/0x3a0 [ 868.405420][T30950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 868.411297][T30950] [ 868.413606][T30950] Reported by Kernel Concurrency Sanitizer on: [ 868.419796][T30950] CPU: 1 PID: 30950 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 868.428719][T30950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.438759][T30950] ================================================================== [ 868.446795][T30950] Kernel panic - not syncing: panic_on_warn set ... [ 868.453362][T30950] CPU: 1 PID: 30950 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 868.462008][T30950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.472040][T30950] Call Trace: [ 868.475338][T30950] dump_stack+0x11d/0x181 [ 868.479666][T30950] panic+0x210/0x640 [ 868.483559][T30950] ? vprintk_func+0x8d/0x140 [ 868.488148][T30950] kcsan_report.cold+0xc/0xd [ 868.492733][T30950] kcsan_setup_watchpoint+0x3fe/0x460 [ 868.498104][T30950] __tsan_unaligned_write8+0xc7/0x110 [ 868.503515][T30950] __delete_from_page_cache+0x1d8/0x4a0 [ 868.509079][T30950] ? __read_once_size.constprop.0+0x20/0x20 [ 868.514960][T30950] ? preempt_count_add+0x6f/0xb0 [ 868.519892][T30950] invalidate_inode_pages2_range+0x757/0xbb0 [ 868.525867][T30950] iomap_dio_rw+0x540/0x9a0 [ 868.530360][T30950] ? constant_test_bit+0x12/0x30 [ 868.535279][T30950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 868.541502][T30950] ext4_file_read_iter+0x2e4/0x380 [ 868.549808][T30950] ? ext4_file_read_iter+0x2e4/0x380 [ 868.555084][T30950] generic_file_splice_read+0x35c/0x500 [ 868.560617][T30950] do_splice_to+0xf2/0x130 [ 868.565016][T30950] ? add_to_pipe+0x1c0/0x1c0 [ 868.569586][T30950] ? add_to_pipe+0x1c0/0x1c0 [ 868.574159][T30950] splice_direct_to_actor+0x1b6/0x540 [ 868.579530][T30950] ? generic_pipe_buf_nosteal+0x20/0x20 [ 868.585060][T30950] do_splice_direct+0x161/0x1e0 [ 868.589897][T30950] do_sendfile+0x384/0x7f0 [ 868.594319][T30950] __x64_sys_sendfile64+0x12a/0x140 [ 868.599515][T30950] ? do_syscall_64+0xb5/0x3a0 [ 868.604292][T30950] do_syscall_64+0xcc/0x3a0 [ 868.608786][T30950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 868.614691][T30950] RIP: 0033:0x45af49 [ 868.618577][T30950] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 868.638163][T30950] RSP: 002b:00007ff7d2524c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 868.646696][T30950] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045af49 [ 868.654656][T30950] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 868.662622][T30950] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 868.670579][T30950] R10: 0000000008800000 R11: 0000000000000246 R12: 00007ff7d25256d4 [ 868.678540][T30950] R13: 00000000004c9b28 R14: 00000000004e2bd0 R15: 00000000ffffffff [ 869.819778][T30950] Shutting down cpus with NMI [ 869.826036][T30950] Kernel Offset: disabled [ 869.830368][T30950] Rebooting in 86400 seconds..