me="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/826/file0/bus" dev="ramfs" ino=257280 res=1 [ 2001.598282] audit: type=1804 audit(2000001547.290:3828): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/793/file0/bus" dev="ramfs" ino=256883 res=1 [ 2001.623914] audit: type=1804 audit(2000001547.290:3829): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/793/file0/bus" dev="ramfs" ino=256883 res=1 03:59:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x10b, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x6, 0x3, 0x1, 0x80000000, 0x0, 0x400, 0x0, 0x0, 0x40, 0x4, 0x8001, 0x8, 0x4000000, 0x0, 0x2, 0x7, 0x4, 0xc8b, 0xe9, 0x4, 0x7f, 0x5, 0x5235, 0xf3, 0x1, 0xcf15, 0x8, 0x1, 0x800, 0xfbc9, 0x101, 0x4, 0x2, 0xb469, 0x7fff, 0xcd43, 0x0, 0x496, 0x5, @perf_config_ext={0x471e, 0x80000001}, 0x20808, 0x2938, 0x664d, 0x5, 0xfff, 0x2, 0x20}, r1, 0xd, r0, 0x3) [ 2001.659323] audit: type=1804 audit(2000001547.350:3830): pid=17938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/826/file0/bus" dev="ramfs" ino=256887 res=1 [ 2001.659381] warning: `./file0' has both setuid-root and effective capabilities. Therefore not raising all capabilities. [ 2001.698780] FAT-fs (loop2): bogus number of reserved sectors [ 2001.710864] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2000000000000004) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) 03:59:07 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000003f00000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2001.795055] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:59:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10004, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 03:59:07 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xd7090000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x800) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0x94}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000005c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in, @in, 0x4e21, 0x9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x7b, r3, r4}, {0x9, 0x401, 0x7, 0x4, 0x7, 0x3, 0x1, 0x3}, {0x1, 0xfff, 0x5, 0x6}, 0x80, 0x6e6bb1, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d5, 0x33}, 0xa, @in6=@remote, 0x3506, 0x6, 0x3, 0x800, 0x0, 0x7, 0x5}}, 0xe8) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffffed, 0x400000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0xfd3d) 03:59:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2000000000000004) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x7fff, 0x7, 0x20, &(0x7f0000ffc000/0x4000)=nil, 0x7f}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="02fbff00020000000000000000001000dac91583caa9"], 0x10}}, 0x0) 03:59:07 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000400000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2002.131760] FAT-fs (loop2): bogus number of reserved sectors [ 2002.154109] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2002.177349] FAT-fs (loop1): bogus number of reserved sectors 03:59:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2000000000000004) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x6) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:59:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = fcntl$getown(r0, 0x9) ptrace$setregs(0xd, r1, 0x100, &(0x7f0000000440)="6777afb14c89eaac4c5005d0f5be1d86d1af37aa037705f1e8360f5465ce20df74f6b5926c25e9902dbbb5c3ea71a2cba9af2c8a9d6d1531f61823860c44cfd41299d903b0892f3af78b4cb3265399c35c74329601efb3f5e687cce8eb702d8ac36cee26adcf7bc86db6c0d38255c06172f2d612283e5dfe4c61c55e6a426fd092df1f24b78616db751f79835da2") write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400, 0x0) 03:59:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2002.213365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2002.229253] audit: type=1804 audit(2000001548.030:3831): pid=17981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/827/file0/bus" dev="ramfs" ino=257019 res=1 [ 2002.340798] FAT-fs (loop2): bogus number of reserved sectors [ 2002.385616] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:08 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000007000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2002.441794] FAT-fs (loop1): Unrecognized mount option "" or missing value 03:59:08 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x20800, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1800000000000000, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2000000000000004) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x2}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r3, 0x8}, &(0x7f00000000c0)=0xfffffffffffffe1d) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r4, 0x1}, &(0x7f0000000280)=0x8) sendmsg$key(r1, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x10}}, 0x0) 03:59:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x876) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000000000000000001100100000000"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) syslog(0x2, &(0x7f0000000340)=""/83, 0x53) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)={0x6, 0xfffffffffffffff8, 0x10000, 0x101, 0x9, 0x5}) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000000000000004dffffffffffffff0000000000000000000700000000380000050000f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ff325f6becbd81c6bcbcc6bd61b0741d9080bfc1927fe22dec8696273ef000000000000000000000000"], 0x78) r2 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x2, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000600)={0x1f, {0x8, 0x1, 0x1f, 0x5, 0x200, 0x7fff}, 0x4a43}, 0xa) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000480)={{0xa, 0x5, 0x3, 0x61, '\x00', 0x3}, 0x5, 0x30, 0x3, r1, 0x3, 0x3, 'syz1\x00', &(0x7f0000000440)=['security]GPL\x00', '/dev/sg#\x00', "4a76272b289d6b657972696e67295b76626f786e657431656d306367726f75702a47504c283a00"], 0x3d, [], [0x7, 0x7, 0xfffffffffffffe01, 0xffff]}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xffffffffffffff18) 03:59:08 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x6701, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:08 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000034000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:08 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x8f090000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7}, [{}]}, 0x78) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./bus\x00') open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) stat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000480)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[], 0xffffffffffffff17) 03:59:08 executing program 3: socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000003c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000005000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000440)={0x0, &(0x7f0000000400), 0x8, 0xffffffffffffffff, 0x2}) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x110002, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize'}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x66, 0x0, 0x30, 0x63, 0x75, 0x65, 0x7e], 0x2d, [0x30, 0x73, 0x35, 0x3d], 0x2d, [0x73, 0x65, 0x38, 0x36], 0x2d, [0x36, 0x7d, 0x71, 0x65], 0x2d, [0x39, 0x61, 0x65, 0x35, 0x3b, 0x38, 0x77, 0x61]}}}]}}) read$FUSE(r0, &(0x7f0000002000), 0x10165) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14}, 0x14}}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) ioctl(r3, 0xffffffffffffffff, &(0x7f0000000b40)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r4 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) [ 2002.819660] FAT-fs (loop2): bogus number of reserved sectors [ 2002.828090] FAT-fs (loop1): bogus number of reserved sectors [ 2002.879467] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2002.888554] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2002.914168] FAT-fs (loop5): bogus number of reserved sectors [ 2002.934200] FAT-fs (loop5): Can't find a valid FAT filesystem 03:59:08 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000700000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2003.071011] FAT-fs (loop2): Unrecognized mount option "<3>[ 2002.914168] FAT-fs (loop5): bogus number of reserved sectors [ 2003.071011] " or missing value 03:59:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x4000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@remote, @rand_addr=0x5, r2}, 0xc) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2003.147136] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:09 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x9d7, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$inet(r1, &(0x7f0000000100), &(0x7f0000000180)=0x10) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20, @multicast2}, {}, 0x112, 0x81, 0x5, 0x40bb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x9dda80325cb6ccc4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) sendmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x1d, r5}, 0x10, &(0x7f0000000480)={&(0x7f00000003c0)=@canfd={{0x4, 0x3, 0x3, 0x5}, 0x16, 0x1, 0x0, 0x0, "4addb29d5257e372611ed068949628b00ba1696d0867aa2e137c21222c2efbf0e09871aa47948260a22526848beaac8baab0ce90b6c85829a0f8ad20e5f0a87d"}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x8800) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2003.305076] FAT-fs (loop5): bogus number of reserved sectors [ 2003.323906] FAT-fs (loop5): Can't find a valid FAT filesystem 03:59:09 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000006800000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2003.487663] FAT-fs (loop2): bogus number of reserved sectors [ 2003.509803] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2003.549390] FAT-fs (loop1): bogus number of reserved sectors [ 2003.567483] overlayfs: './file0' not a directory [ 2003.597389] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 2003.614195] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xfffffffffffffffb) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) r1 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000440)="4da0abc68ff875b50206b96546707a55171d41053111098675f5afeadb4c9ab2d0715412c1dc7ead0c7ff2f9171da85437c10e005697497ce38c654ed04474c69910d034637c9d8cf89362626058e1ca24e77b1fcd6b2015d9b646b86d5c060ff4bd6b5c8ad2647f2968cab579d3d8422eb020f179d81d85e4fa0094c9e3fa59", 0x80, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) statfs(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/96) keyctl$reject(0x13, r1, 0x7f, 0x5, r2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x440000, 0x0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000640)="3a9656b034372a47ab6b270c87") write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYPTR64], 0x8) 03:59:09 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000300000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2003.746261] FAT-fs (loop1): Unrecognized mount option "2" or missing value [ 2003.759521] FAT-fs (loop3): bogus number of reserved sectors [ 2003.794595] FAT-fs (loop5): bogus number of reserved sectors [ 2003.826314] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2003.827146] FAT-fs (loop5): Can't find a valid FAT filesystem 03:59:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x20, 0x4) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:09 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x8046, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000440)=""/73, &(0x7f0000000080)=0x49) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:09 executing program 3: socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000003c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000005000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000440)={0x0, &(0x7f0000000400), 0x8, 0xffffffffffffffff, 0x2}) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x110002, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize'}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x66, 0x0, 0x30, 0x63, 0x75, 0x65, 0x7e], 0x2d, [0x30, 0x73, 0x35, 0x3d], 0x2d, [0x73, 0x65, 0x38, 0x36], 0x2d, [0x36, 0x7d, 0x71, 0x65], 0x2d, [0x39, 0x61, 0x65, 0x35, 0x3b, 0x38, 0x77, 0x61]}}}]}}) read$FUSE(r0, &(0x7f0000002000), 0x10165) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14}, 0x14}}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) ioctl(r3, 0xffffffffffffffff, &(0x7f0000000b40)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r4 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) 03:59:09 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000007a000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2004.076335] FAT-fs (loop2): bogus number of reserved sectors [ 2004.097220] FAT-fs (loop1): bogus number of reserved sectors [ 2004.104127] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000c66b3b46df18021b7d0baa10d9920ba50e0adfded5991daf000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000"], 0x46) fchmod(r0, 0x91) [ 2004.138143] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2004.295156] FAT-fs (loop2): bogus number of reserved sectors [ 2004.330482] sg_write: data in/out 1178299298/28 bytes for SCSI command 0x0-- guessing data in; 03:59:10 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000006c00000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2004.330482] program syz-executor0 not setting count and/or reply_len properly [ 2004.369555] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 2004.427586] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2004.465726] sg_write: data in/out 1178299298/28 bytes for SCSI command 0x0-- guessing data in; [ 2004.465726] program syz-executor0 not setting count and/or reply_len properly 03:59:10 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x167, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) r1 = memfd_create(&(0x7f0000000000)='mime_type]ð1vboxnet1.\\keyringppp1vmnet0vmnet0}eth0/\x00', 0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:10 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x2) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000780)={0x6, 0xce22, 0x4, 0xa15, 0x4, [{0x100, 0x661, 0x4, 0x0, 0x0, 0x8}, {0x7, 0x8, 0x40}, {0x2, 0x1, 0x0, 0x0, 0x0, 0x80}, {0x10001, 0x6, 0x4a45, 0x0, 0x0, 0x2}]}) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x20200, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000000)=0x3) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000340)={0x3, 0x400000000, 0x100000000, 0x657, 0xc5, 0x3c500000}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="ff112572a231a78d38be2b2c28042c6ff4"]) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0xfff, 0x1, 0x0, 0x4, 0x0, 0x7}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000580)="646e739e3f5f7265736f6c76657200", &(0x7f0000000740)={'syz'}, 0x0, 0xec, 0xfffffffffffffff9) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:10 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000007a00000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2004.719900] FAT-fs (loop1): bogus number of reserved sectors [ 2004.728342] FAT-fs (loop2): bogus number of reserved sectors [ 2004.734427] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2004.734554] FAT-fs (loop3): bogus number of reserved sectors 03:59:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xe9}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000001c000000000000000000000000000000e73b6737b3f948b30000000000000000000000000000000006050000000000045056cff7979d4f7eecfcef8862790bcd8457396735df0688eecf2f1dbfeccb613b329ed8f7a95e0d4ef6ddc818d0fa0e37836f79b8e9e9a5d6a45a2ee812848892d7548bab6bfb39a41edd0c408d22951c1a62311b9357abbbb84ecfcdf1f8f495316a91d68492ed7114182b715d13e5bcb56733000000000000"], 0x46) [ 2004.775672] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2004.785756] FAT-fs (loop3): Can't find a valid FAT filesystem 03:59:10 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000007000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2004.904280] sg_write: data in/out 67108828/78 bytes for SCSI command 0x0-- guessing data in; [ 2004.904280] program syz-executor0 not setting count and/or reply_len properly [ 2004.963021] FAT-fs (loop1): Unrecognized mount option "1" or missing value 03:59:10 executing program 3: socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000003c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000005000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000440)={0x0, &(0x7f0000000400), 0x8, 0xffffffffffffffff, 0x2}) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x110002, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize'}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x66, 0x0, 0x30, 0x63, 0x75, 0x65, 0x7e], 0x2d, [0x30, 0x73, 0x35, 0x3d], 0x2d, [0x73, 0x65, 0x38, 0x36], 0x2d, [0x36, 0x7d, 0x71, 0x65], 0x2d, [0x39, 0x61, 0x65, 0x35, 0x3b, 0x38, 0x77, 0x61]}}}]}}) read$FUSE(r0, &(0x7f0000002000), 0x10165) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14}, 0x14}}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) ioctl(r3, 0xffffffffffffffff, &(0x7f0000000b40)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r4 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) 03:59:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:59:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000000000000000000006000000010000800000000000000010"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000000000a500010000200000000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f0000000100)=0x68) 03:59:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000020000000000000000000000000000000000000000000000060000000000001450569324d571db000000000000000000590acff76c1f988d137606979d4f7e7b00000ff3ae454ea0ba7dc0c7d2ef808ecc1fc8621cdb1ddc3fcc324791ecaee2755e723360f5b7bc733b7fbb669af305784bc053dfd4b96ca4792fcc94278e1187dac797e217ce49aa9d82850f1087105fec40c33fc42d9d87276cda24a9792eceea79f80eb047b2cd07aedd75c7a5e86306cd18202860bf11696ddb1cd5c6"], 0x46) 03:59:10 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000ffffffff000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:10 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x9f05000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2005.256288] FAT-fs (loop2): bogus number of reserved sectors [ 2005.297356] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x10000}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450540c24d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2005.344935] FAT-fs (loop1): bogus number of reserved sectors 03:59:11 executing program 5 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:59:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000100000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2005.408041] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) mknod(&(0x7f0000000000)='./file0/bus/file0\x00', 0x24, 0x81) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0x40) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2005.556055] FAT-fs (loop1): Unrecognized mount option "2" or missing value 03:59:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000ffffff8000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2005.697281] FAT-fs (loop2): bogus number of reserved sectors [ 2005.728804] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2005.772438] FAT-fs (loop3): bogus number of reserved sectors [ 2005.797918] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2005.835579] FAT-fs (loop2): bogus number of reserved sectors [ 2005.871206] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:11 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000005c0)) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000e80)}], 0x1200000, &(0x7f00000001c0)=ANY=[@ANYBLOB="d306baab000000000000f1d5"]) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x3c32}, 0x4) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) rename(0xfffffffffffffffd, &(0x7f0000000100)='./file1\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in=@broadcast}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000480)=0xe8) ioctl$TIOCCBRK(r0, 0x5428) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000d80)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0072b37ed1875592207e9ace5da062bcb56f940240609228806af00fc917e21530ba157dbe47556e"]) 03:59:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x8000000002, 0xfffffffffffffd97, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x2}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) flistxattr(r0, &(0x7f0000000440)=""/231, 0xe7) 03:59:11 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x370d000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000004c00000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x6f, &(0x7f0000000280), &(0x7f0000000400)=0x4) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) mount$bpf(0x0, &(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000100)='bpf\x00', 0x180002, &(0x7f0000000780)={[{@mode={'mode', 0x3d, 0x7a}}, {@mode={'mode', 0x3d, 0x37e6}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x8000}}], [{@smackfshat={'smackfshat', 0x3d, 'userproc'}}, {@smackfsdef={'smackfsdef', 0x3d, 'dummy0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@measure='measure'}, {@measure='measure'}, {@appraise_type='appraise_type=imasig'}]}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x7fff, 0x9, 0xf2, 0x8, 0x3f, 0x800, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0xfffffffffffff18c}}, 0xc7a7, 0x7, 0x12, 0x1f, 0x80000000}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000008c0)={r4, @in6={{0xa, 0x4e21, 0xa2, @mcast1, 0x2}}, 0x8, 0x10001, 0xe052, 0x3, 0x1}, &(0x7f0000000200)=0x98) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2006.240196] FAT-fs (loop2): bogus number of reserved sectors [ 2006.258706] FAT-fs (loop1): bogus number of reserved sectors 03:59:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0xfffffffffffffffd, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x4000, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2006.284199] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2006.290261] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2006.313114] kauditd_printk_skb: 37 callbacks suppressed [ 2006.313129] audit: type=1804 audit(2000001552.110:3869): pid=18388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/800/file0/bus" dev="ramfs" ino=258578 res=1 03:59:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000004800000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0x10001, 0x40, 0x5767, 0x2, 0x3, 0x4a8, 0x341, 0x40, 0xef, 0x5, 0x5f75, 0x38, 0x2, 0x1000, 0x1}, [{0x7, 0x100, 0xffffffffffff8001, 0xfff, 0x8, 0x8, 0xffff, 0x8}, {0x3, 0x9, 0x1, 0x9, 0x3, 0x6, 0x2, 0x1}], "0423fe51062ba7aead69c993790ef446116e954ced2c5e588c0de592003d6fc81a0058296a30c6e8a796fa977b43a678d444ded27cab7255c4bf7408d5d8234cb53cecf834dbc24dbb9509e425440afdde1dd59492750fb58f7010391bcbf3217fcbd7065aecd7c6b0fe87211caeda0b9546385f4575f3cdd108053981fcc7d811077b38301a961e706c", [[], [], [], [], []]}, 0x63a) [ 2006.509733] audit: type=1804 audit(2000001552.120:3870): pid=18388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/800/file0/bus" dev="ramfs" ino=258578 res=1 [ 2006.523483] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2006.536206] FAT-fs (loop2): bogus number of reserved sectors [ 2006.585044] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2006.616123] overlayfs: failed to resolve './file1': -2 [ 2006.643290] audit: type=1804 audit(2000001552.260:3871): pid=18421 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/800/file0/file0/bus" dev="ramfs" ino=259167 res=1 [ 2006.646479] sg_write: data in/out 1073807837/1552 bytes for SCSI command 0x0-- guessing data in; [ 2006.646479] program syz-executor0 not setting count and/or reply_len properly 03:59:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="0012b8063989180d8edab55f08843c0f8d40013300100000000000000000000000000100f9450bde2ce26500000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2006.692592] sg_write: data in/out 1073807837/1552 bytes for SCSI command 0x0-- guessing data in; [ 2006.692592] program syz-executor0 not setting count and/or reply_len properly 03:59:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000700000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:12 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xa70c0000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2006.737055] audit: type=1804 audit(2000001552.260:3872): pid=18422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/800/file0/file0/bus" dev="ramfs" ino=259167 res=1 [ 2006.791623] overlayfs: failed to resolve './file1': -2 03:59:12 executing program 3: r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000640)='/dev/input/mouse#\x00', 0x1, 0x40) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffffffff000, 0x0, 0x6, 0x7, 0xcbf, 0xad62, {0x0, @in6={{0xa, 0x4e21, 0xe8f, @empty, 0x7ff}}, 0x4, 0xff, 0x3, 0x7f, 0x5}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x7}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r4 = socket$inet6(0xa, 0x40100000003, 0x87) sendto$inet6(r4, &(0x7f0000000080), 0xfc08, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:59:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3b7}, [{}], "3b8787309f1bbeebb614255479517fc22cb6223c9446bd4960fc"}, 0x92) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2006.942371] FAT-fs (loop1): bogus number of reserved sectors [ 2006.978100] audit: type=1804 audit(2000001552.780:3873): pid=18465 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/801/file0/bus" dev="ramfs" ino=258677 res=1 [ 2006.979183] FAT-fs (loop2): bogus number of reserved sectors [ 2007.019046] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000ffffff80000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101002, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000440)=""/240, &(0x7f0000000080)=0xf0) ioctl$TIOCEXCL(r1, 0x540c) [ 2007.039824] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2007.091341] audit: type=1804 audit(2000001552.780:3874): pid=18465 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/801/file0/bus" dev="ramfs" ino=258677 res=1 [ 2007.159463] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) [ 2007.217129] FAT-fs (loop2): bogus number of reserved sectors 03:59:13 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xff08, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2007.261621] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2007.284213] audit: type=1804 audit(2000001552.840:3875): pid=18468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/835/file0/bus" dev="ramfs" ino=258685 res=1 03:59:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000200000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b000001f6f07a114a60c9d4f0d3e6cda2d9141a92e080a1575af85588d870e0e1b6947b0b18696a20f6847cdd1f7045ff087248410fbb924809015d45f6c74265965f5d60a255a95b61465acaa2696d8a3a72ee02cf0691c83e438ef7898b0e106bd5bd6d93a0aa8176ece8ba133d675e693752f76661d52d200645a459d00ad9bdfcafb35ace52b0f9ac2ce61ec298e77b02d706d8db007bd41a3e89f1e7e5d62e72b54594dcdc0d"], 0x46) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000001c0)=0xb) [ 2007.382866] audit: type=1804 audit(2000001552.960:3876): pid=18486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/835/file0/bus" dev="ramfs" ino=259215 res=1 03:59:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2007.413401] audit: type=1804 audit(2000001552.990:3877): pid=18449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/801/file0/file0/bus" dev="ramfs" ino=258705 res=1 [ 2007.451982] audit: type=1804 audit(2000001552.990:3878): pid=18455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/801/file0/file0/bus" dev="ramfs" ino=258705 res=1 03:59:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000000000000000000006000000010000800000000000cd0000"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {0x2, 0x4e23}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2007.530413] FAT-fs (loop1): bogus number of reserved sectors [ 2007.570216] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) 03:59:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000004c000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2007.744393] FAT-fs (loop1): bogus number of reserved sectors [ 2007.771823] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2007.781704] FAT-fs (loop2): bogus number of reserved sectors [ 2007.803632] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1f, 0x86) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f0000000440)=""/73, 0x49) 03:59:13 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x557, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2007.957042] FAT-fs (loop2): bogus number of reserved sectors [ 2007.989795] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000001000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x8}, @in6={0xa, 0x4e20, 0xb73, @mcast1, 0x59b}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x9}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x101}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}], 0x78) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x8857}, @void, @arp=@generic={0x313, 0x8809, 0x6, 0xb, 0x4, @remote, "45e26b4f3e2ee9c401c508", @broadcast, "212c0db6f388f407cab52da289df34d1"}}, 0x33) 03:59:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x7, 0x6, 0x6}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x103400, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14, 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast2, @loopback, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000500)='v') sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@ipmr_newroute={0x13c, 0x18, 0x300, 0x70bd2a, 0x25dfdbfe, {0x80, 0x10, 0x0, 0x101, 0xfd, 0x2, 0xfd, 0x8, 0x2400}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_MARK={0x8, 0x10, 0x7}, @RTA_METRICS={0xe8, 0x8, "e88e2273aa8098de5d393aa3501c218da2743531153cf668a330bcd5146a0a26a4b01d2f7e32d4ac9cd172dce5a5e4b595550d6c4d113b46f0c8e80f92f62166d2f54bc74d10140d2787a44db40c522b851933dfdb6a3c9ea966ef6309131a8f697b6f0bb40b10ba94ac373a7c3bd26586c1f5ba848130837a753b85da7154dcf560287c3933b603ffd7f5324830025fdda0205a99c2805d331cd277bfff8767897839355620ead60ac91927cf72f97805f300e25f8378a659c0da3ee7f91708f39fad64308b7e688c44187ea060e45e452ea3ae6f200751eecd474df8483faaae220c"}, @RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_MARK={0x8, 0x10, 0x3}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_IIF={0x8, 0x1, r3}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:59:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) [ 2008.195768] FAT-fs (loop1): bogus number of reserved sectors [ 2008.221860] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000074000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2008.294550] FAT-fs (loop2): bogus number of reserved sectors [ 2008.318181] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2008.370684] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x81, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000440)=""/115) [ 2008.470937] FAT-fs (loop2): Unrecognized mount option "" or missing value 03:59:14 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x947, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00') chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 03:59:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8000) write$binfmt_elf64(r0, &(0x7f00000010c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x100000001, 0x2, 0x38, 0x0, 0xfffffffffffffffe, 0x2, 0x8000000000000000}, [], "", [[], [], [], [], [], [], [], [], [], []]}, 0x1c) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000430aa040dd11625a00000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000000000006c000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2008.743592] FAT-fs (loop1): bogus number of reserved sectors 03:59:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00') chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2008.808193] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2008.840513] FAT-fs (loop2): bogus number of reserved sectors [ 2008.878469] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2008.917879] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000006c00000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2009.009717] FAT-fs (loop2): bogus number of reserved sectors 03:59:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x2000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x31e83bb8, 0x6, @scatter={0x0, 0x0, &(0x7f0000000080)}, &(0x7f00000000c0)="158a4331c640ddc3dbc5ae20c330bc69d278695569d3833b0f5cdc0373fb87afb8253aa7cf2854f240a54467ff8582106b589ff2d49724808e62c3ecdfa16e2bd151e5e8ddca799b78403e515eb2f09c4d18d304af8b1b1bd701e911da4f0ffef228", &(0x7f0000000200)=""/208, 0x0, 0x14, 0x0, &(0x7f0000000180)}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x2) 03:59:14 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x48, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2009.064125] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00') chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5450, 0x0) 03:59:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$vsock_dgram(0x28, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 03:59:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{r0}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) fallocate(r2, 0x0, 0x5, 0x9) 03:59:15 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000600000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2009.315343] FAT-fs (loop1): bogus number of reserved sectors [ 2009.382625] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2009.415638] FAT-fs (loop2): bogus number of reserved sectors [ 2009.431100] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='squashfs\x00', 0x40022, &(0x7f0000000440)='nodev{vmnet0,\\*vmnet1\x00') write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff03}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:15 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000400000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2009.521099] FAT-fs (loop2): bogus number of reserved sectors [ 2009.545697] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) 03:59:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000680)=0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) fchdir(r0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000440)="df81c1f4582cd69896575c40ea2335916b43fc9697d22f7bf4b41487d13abd9c9d9164d0e721be191488f9d241aaf7b0c68d465f6e614441d8750da356bf04353a1a0aa294c321095eb4c1990c65cdfb88f0a1ad4f84757a2d6324ff58ae76ceaf1efd249130608d17e9f3f978e196dfdde6db90ef8de94a", 0x78}], 0x1, 0x0, 0x0, 0x1}, 0x4000000) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:15 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xcf020000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2009.647031] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xd8, 0x8, 0xd, 0x200, 0x70bd28, 0x25dfdbfc, {0x2}, [@nested={0xc, 0x57, [@typed={0x8, 0x1d, @u32=0x2}]}, @nested={0xb8, 0x2c, [@generic="caef2c6335fd76e7a9238db8cbce7fede596669739aec114c9459864f1cf85c51fc16b3bbed8e30d8d146533a3b5309db6b450d0ccb15ee39dc92b7a2ad27add21c087ec88ed6dd9f2e8e7c588b8a7b48d86699a7d58e387f7725708d7d49fec27c035f781df6236550a4bac2d24504f7fb02c6016f1fd43fa3fb60974df0cf61a208c67973b4d86354a86e6a491236ed53d878c365f8960d50a6e7b7f369ec0620a80d0226a124f5f3b9d9e68914b4ced4a13"]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x40080) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:15 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000004c00000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004dff000000000000000000000000380000000000000000000b00000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f18c000000000000000000aee7d9dac14dbe522c02b86399fa094ec3d7f0e0"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$cont(0xffffffffffffffff, r1, 0x3ea22a6, 0x8) [ 2009.899238] FAT-fs (loop1): bogus number of reserved sectors [ 2009.970394] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2010.001080] FAT-fs (loop2): bogus number of reserved sectors 03:59:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x40049409, 0x0) [ 2010.038202] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:15 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000074000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2010.113727] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f0000000000), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f614509240c45c0f665350fee1d8c7e7b000000000000"], 0x46) [ 2010.216975] FAT-fs (loop2): Unrecognized mount option "Ø" or missing value 03:59:16 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xef03, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x0, 0x6, &(0x7f0000000200)='ramfs\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)=0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000400)=0xfffffffffffffffb) r5 = getpgrp(r4) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x20, 0x4483, 0x9, 0x0, 0x0, 0x4, 0x8020, 0x6, 0x1000, 0x4, 0x7, 0xb1, 0x5, 0x9, 0xfffffffffffff001, 0x7, 0x5, 0x80000001, 0x0, 0x4, 0x2, 0x7fff, 0x0, 0x5, 0x2, 0x8, 0x0, 0x0, 0x100000000, 0x7, 0x3, 0x100, 0x200, 0x7, 0x7, 0x80000001, 0x0, 0x0, 0x6, @perf_config_ext={0xcc, 0x3}, 0x4000, 0x9, 0x3f, 0x4, 0x2, 0x3, 0x1}, r5, 0x10, r2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x10000000) timer_delete(r6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) 03:59:16 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000006000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x946, 0x10000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x2, 0x4) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[], 0x0) [ 2010.475131] FAT-fs (loop1): bogus number of reserved sectors 03:59:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) [ 2010.532232] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2010.588386] FAT-fs (loop2): bogus number of reserved sectors 03:59:16 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) write$FUSE_CREATE_OPEN(r0, &(0x7f00000004c0)={0xa0, 0x0, 0x5, {{0x0, 0x1, 0xffff, 0x102000000000, 0xfffffffffffffff8, 0x7, {0x6, 0x1, 0x8f, 0x800, 0x8, 0x7ff, 0xff, 0x2b4a, 0x7ff, 0xa5f0000, 0x8000, r1, r2, 0x7ff, 0x6}}, {0x0, 0x1}}}, 0xa0) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c1f0000000000000000000c0000000000000000000000000000000000004dffffffffffffff0000000000000000003800000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000070000000400000004000000000000000000000000000000"], 0x78) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2010.645212] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2010.673168] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:16 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000003000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:16 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x3a7, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000b92505641b0800ada11606df87000000000000000000000000000000430000000000000000000000000000001450569324d571db00000000000000"], 0x46) [ 2010.844748] FAT-fs (loop2): Unrecognized mount option "" or missing value 03:59:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) 03:59:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40000, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000780)={"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"}) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:16 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000300000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0xc86, 0x6, 0x3ff, 0x0, 0x8, 0x3, 0x3f, 0x20, 0x2f9, 0x40, 0x8f, 0xffffffff, 0x40, 0x38, 0x1, 0x2f92a883, 0x4, 0x5}, [{0x60000001, 0x8001, 0x1, 0x4, 0x9, 0xfffffffffffffff7, 0xe8, 0x6}], "999fb572269db5c82f402822e6a05757a10b8219c5d8f056da790ef023cc41b6f04eeafa5b13a93aa750b4db3226923b1bbababaaa2355957a697435e1eb7e4b450886210d0de17d7af29cdcbd96626964438cff87aca634715aa7776acae62c89f6fc390d1b86e6c7096a0092013141e1435122b513ab11880d934a046a909926d18510d6364cdc37016dbbc3ce48d11d2763fb13507401ebb1be158ee6e10df276f0cb35cd", [[], [], [], [], [], []]}, 0x71e) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004dffffffffffffff0000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2011.105232] FAT-fs (loop1): bogus number of reserved sectors [ 2011.144138] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2011.227456] FAT-fs (loop2): bogus number of reserved sectors [ 2011.233313] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2011.257230] sg_write: data in/out 16713314/1780 bytes for SCSI command 0x0-- guessing data in; [ 2011.257230] program syz-executor0 not setting count and/or reply_len properly 03:59:17 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000000000003f000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2011.308828] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2011.329161] sg_write: data in/out 16713314/1780 bytes for SCSI command 0x0-- guessing data in; [ 2011.329161] program syz-executor0 not setting count and/or reply_len properly [ 2011.400853] FAT-fs (loop2): bogus number of reserved sectors [ 2011.406881] kauditd_printk_skb: 32 callbacks suppressed [ 2011.406900] audit: type=1804 audit(2000001557.200:3911): pid=18940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/842/file0/bus" dev="ramfs" ino=261287 res=1 [ 2011.474501] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2011.480775] audit: type=1804 audit(2000001557.210:3912): pid=18900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/808/file0/file0/bus" dev="ramfs" ino=261289 res=1 03:59:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5421, 0x0) 03:59:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x101100) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7ff, 0xf7, 0x7, 0x8f, 0x8, 0xffff, 0x9, 0x81, 0x3f, 0x8000000, 0x37}, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2011.516474] audit: type=1804 audit(2000001557.250:3913): pid=18907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/808/file0/file0/bus" dev="ramfs" ino=261289 res=1 03:59:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000580)={0x1, 0x401, 0x4, 0x1, 0x4}) sendto$inet6(r0, &(0x7f0000000000)="e031444a9bcfb6c41d8bd9ae71104df7400159544ad3c7c818697ad773", 0x1d, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1f}}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) write$P9_RWALK(r2, &(0x7f0000000840)={0x30, 0x6f, 0x1, {0x3, [{0x20, 0x1, 0x3}, {0x1, 0x1, 0x7}, {0x80, 0x0, 0x6}]}}, 0x30) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r5) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x7, 0x3, 0x19c, 0x2, 0x8}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r6, 0x6, 0xd8, 0x2, 0x2b}, &(0x7f0000000200)=0x14) splice(r0, &(0x7f0000000280), r2, &(0x7f0000000400), 0x4, 0x0) read(r1, &(0x7f0000000780)=""/190, 0xbe) 03:59:17 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xa1f, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:17 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000fffffffb000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) getrusage(0xffffffffffffffff, &(0x7f0000000440)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000008000000000000000000000000000000090000000000000000000000001450569324d571db00f7ffffffffffffff6b1bcff7979d4f7e7b0000"], 0x46) [ 2011.794438] FAT-fs (loop2): bogus number of reserved sectors [ 2011.816352] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2011.872688] FAT-fs (loop1): bogus number of reserved sectors 03:59:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) [ 2011.904170] audit: type=1804 audit(2000001557.700:3914): pid=18995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/843/file0/bus" dev="ramfs" ino=261410 res=1 [ 2011.928759] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:17 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000009000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:17 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2012.004129] audit: type=1804 audit(2000001557.730:3915): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/809/file0/bus" dev="ramfs" ino=260736 res=1 [ 2012.129142] audit: type=1804 audit(2000001557.730:3916): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/809/file0/bus" dev="ramfs" ino=260736 res=1 [ 2012.170674] FAT-fs (loop1): Unrecognized mount option "1" or missing value [ 2012.182389] audit: type=1804 audit(2000001557.980:3917): pid=19005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/843/file0/bus" dev="ramfs" ino=260805 res=1 [ 2012.209999] FAT-fs (loop2): bogus number of reserved sectors 03:59:18 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000006c000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x1, 0x800, 0x1, 0x0, 0x7, 0xffffffffffffffff}}, 0x8) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000004000000000000000001450569324d575db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) fcntl$getown(r1, 0x9) [ 2012.248731] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2012.306249] audit: type=1804 audit(2000001558.040:3918): pid=19002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/809/file0/file0/bus" dev="ramfs" ino=260810 res=1 [ 2012.345457] audit: type=1804 audit(2000001558.040:3919): pid=19002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/809/file0/file0/bus" dev="ramfs" ino=260810 res=1 03:59:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:18 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xfe7f0000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:18 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000fdffffff00000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2012.534542] FAT-fs (loop1): bogus number of reserved sectors [ 2012.550699] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000006b002a6ebbe30e52000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) [ 2012.622605] audit: type=1804 audit(2000001558.420:3920): pid=19057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/810/file0/bus" dev="ramfs" ino=261542 res=1 03:59:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2012.691531] FAT-fs (loop2): bogus number of reserved sectors [ 2012.746030] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2012.766279] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x400000000000, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f0000000000), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000002000000000000000000006ab769f202d4fd31560000000000000000000000000000003150569324d531db0000000000000000006b0a"], 0x46) 03:59:18 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000068000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:18 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x27080000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2012.898699] FAT-fs (loop2): bogus number of reserved sectors [ 2012.932010] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5460, 0x0) 03:59:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0xfffffffe, 0x8) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffff32c, 0x40000) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000440), &(0x7f0000000480)=0x14) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000000000000000040000000000000000000000000000000000004dffffffffffffff0000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x9e, 0x7fff, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f0000000500)="6b9bbd752d90d2f9f8eb844824e4086ee5bb4105f5cd47aa00586399620278c9df30cddfb5294d75f7bf0a5f8da251422a6919e52bf4e7465c6b4751b1d2649ac5d429ce85ca40085b6f504c1fa51b4dcc7a8a056e1e22f0b50e1abec0d04d2e7758f8046b97167d6e83f1a60d9257ba4ce0d86cdef80e1036ec1a29c5e3a53deca4f9bbf1b325703dc51bcb973656becd1f851f4c66cb9da38c50d3d0a8", &(0x7f0000000200)=""/208, 0x590682bb, 0x0, 0x0, &(0x7f0000000380)}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6c87f, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000080)={0x3, 0x80000001, 0xa018, 0x1, 0x5, 0x7}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000000927f2ebee6fef762000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x1) 03:59:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x12) timer_delete(r5) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) creat(&(0x7f0000000000)='./file0\x00', 0x24) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) write$P9_RXATTRCREATE(r1, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 03:59:18 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000fffffffd00000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2013.154673] FAT-fs (loop1): bogus number of reserved sectors [ 2013.160534] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000540)={0x8, 0x4, 0x1f, 0x5, &(0x7f0000000440)=[{}, {}, {}, {}]}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2013.348105] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2013.349262] FAT-fs (loop2): bogus number of reserved sectors 03:59:19 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000020000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) [ 2013.428276] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x40}, [{0x0, 0x9, 0x200000000000000, 0x0, 0x0, 0x0, 0x1, 0x8}], "", [[], []]}, 0x278) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:19 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x3f00, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2013.554588] FAT-fs (loop2): bogus number of reserved sectors [ 2013.626994] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:19 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000080ffffff00000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:19 executing program 0: r0 = memfd_create(&(0x7f0000000000)='/dev/sg#\x00', 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000700)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={r1, 0x2, 0x20, 0x1f, 0x1000, 0x7fffffff, 0x7e}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x78) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="f5ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000a32d827e0b8e4999bc53440bad3298b8a9e0fedb795fbe4641a0b442c7f472d6417eff801b8ce6236b0750b50c65168416a5ebe975340af1ced7fe6d2550dc211d5ffd2a3b6fd5af84ceca0f315b8d0b64db145e3a54d71052f9ed83940ebdacacb0869897107d8569614fba1bf98c281f158f55925a9b0f608aa60504"], 0x46) [ 2013.769678] FAT-fs (loop1): bogus number of reserved sectors [ 2013.783765] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:hwclock_exec_t:s0\x00', 0x24, 0x2) open(&(0x7f0000000100)='./file0/bus\x00', 0xfffffffffffffffe, 0x200000000000000) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="000000070000000000000000200000000006000000010000800000000000000000450eca88b480cb6c6e31f26507ea42945ac88f52136b7ce9e987286645b0c56c74adf59126cbb649bfb80fbcf1631f63cf31b9e9aae4ff7fa86c1c8db943a4d67cdede642fe0a103209578bfa3b8acf51d34892bc6ef2dfd12602beee6218f3642c2de10660edbef2fdcdf3f3c556192e7441e471f945dc523b1dce45959c31ce4c0fa278b69b28e909003a6694294541dbd2f6af54ba8a384385ef3b3e8567df95bd29ba6274a8186ab12e16c6f0156183430a255abfa2fd767084f0fe85a0369488736c40dcb68138ba3de2687359c"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0/bus\x00', 0x0, 0x100) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000000c0)={'\x00', {0x2, 0x4e21, @rand_addr=0x7}}) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000b00)={r0, 0x900000000, 0x738e, "8c2d14607cf3da89651277195978838a30f5011c1d25179a2cae20cc7afe27a44c5b12"}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0xffffffff, 0x5}) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000a40)="37cf415c920d2dd8022a8a8c786cf35928b77b8559a64be1edc531ee8f7c71d13d2846e4dcf9d02088e9e4893a2ac3fc1d2205835c52d6f6380739b68e4a029590454c087efecb7472b91705759f684670e8d7af9954931d30934573b0b7265588e047c287f7da118a35e74bc5d769ef31b3676d6beae5a388c7ebbb2f6278f069b672d79e4f9f6a4a7c2824242689127f9ca524906f35042d4037766a8d9d1690a92df1fa4b87a9f0") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000b40)={0x1, 0x4}, 0x8) close(r0) r4 = getuid() syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xff, 0x3, &(0x7f0000000900)=[{&(0x7f0000000340)="ca930e4cb6316fff992aa93932b6ca14a0e487d06ff4c3a62d6fad1f197ce6dd98998ffccc350fcdab598cfcf62e3935978c7b59212fd84e0a0c698b128e19887067fbcc70a57bb1c94236142601db9b414bcd5ff5c3355d2aa1aeeea7f7f2d8ce318241dc832474025a73f4dc3c9527973bc4f9e2092dc556825f33db4d9b4c7db5b7653bd00cafeb203b41ba122b92dfa06d750b08", 0x96, 0xcbf}, {&(0x7f0000000780)="ccccd11ee25e4651e48987d9acffc679968b1b01d24faca3dc99a52b8ad209e4c643da3fda0ebbc7b0e3b16429f4096ef630e866f8bce0f5f9787cbe8125608f6a2b7e502dba56fe", 0x48, 0x8}, {&(0x7f0000000800)="a9aeb2f7dc11c3cf7f163e412b0001cb42a0612c2515ac1ab7261549f3a25fe30145c780ed536708212b5418a245355423422fe548b94de47b0d9bf11f9f9c14dc9d4d97f8b91228629fbd618b1ed6c584468f4d18053afc5e581a23c03b7de66f8e90d7c68bf237d44fad4614de232f5dd4c29d39155bfd1bdf595377734a1fe2f65cd916d21f1ad861928542980791b96882d7a04839dfd720af1834e295b29e8790e1307b873df67f792400b9f503013b1f09073f158f765686f77153981aa52c58770ff8bb91eb", 0xc9}], 0x2, &(0x7f0000000980)={[{@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}], [{@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, 'ppp0'}}, {@fsuuid={'fsuuid', 0x3d, {[0x3c, 0x0, 0x77, 0x3f, 0x64, 0x66, 0x0, 0x37], 0x2d, [0x0, 0x31, 0x76, 0x34], 0x2d, [0x34, 0x0, 0x39, 0x64], 0x2d, [0x30, 0x31, 0x36, 0x66], 0x2d, [0x3f, 0x77, 0x7e, 0x37, 0x62, 0x77, 0x3d, 0x62]}}}, {@fowner_gt={'fowner>', r4}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) 03:59:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) [ 2013.907321] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:19 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000000000004c000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "187ad4de0a9cc0f893006d37f7530e9c"}, 0x11, 0x1) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2014.056563] FAT-fs (loop2): bogus number of reserved sectors [ 2014.115174] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:19 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xcef, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000089f7b6dd7efc984b660000000000000000000000000000000000000000004dffffffffffffff0000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:20 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000007a00000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x2, 0x0) [ 2014.317499] FAT-fs (loop1): bogus number of reserved sectors [ 2014.328214] FAT-fs (loop2): Unrecognized mount option "appraise" or missing value 03:59:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2014.365092] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2014.506450] FAT-fs (loop2): Unrecognized mount option "Ê“L¶1oÿ™*©92¶Ê ä‡Ðoôæ-o­|æݘ™üÌ5Í«YŒüö.95—Œ{Y!/ØN [ 2014.506450] i‹ŽˆpgûÌp¥{±ÉB6&Û›AKÍ_õÃ5]*¡®î§÷òØÎ1‚A܃$tZsôÜ<•'—;Äùâ -ÅV‚_3ÛM›L}µ·e;Ð ¯ë ;Aº+’ß mu " or missing value 03:59:20 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000040000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2014.548324] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:20 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xd700000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x2) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) setxattr$security_selinux(&(0x7f0000000280)='./file0/bus\x00', &(0x7f0000000480)='security.selinux\x00', &(0x7f0000000580)='system_u:object_r:auditd_etc_t:s0\x00', 0x22, 0x2) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000780)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000020000000000000000000000"]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23}}, [0x6, 0x1, 0x1ff, 0x20, 0x9, 0x856, 0x2, 0x3ff, 0xffffffff, 0x503, 0x5000000, 0xfffffffffffff001, 0x7, 0xde4b]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r5, 0x2, 0x30, 0x1, 0x8}, &(0x7f0000000200)=0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) r6 = getuid() r7 = getegid() r8 = geteuid() lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000007c0)='/dev/loop0\x00', &(0x7f0000000800)='./file0/bus\x00', &(0x7f0000000840)='fuseblk\x00', 0x80002, &(0x7f00000009c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@uid_eq={'uid', 0x3d, r8}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'em1md5sumbdevmd5sumbdeveth1ppp1'}}, {@smackfshat={'smackfshat', 0x3d, 'system(selinux'}}, {@fowner_gt={'fowner>', r9}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@subj_type={'subj_type', 0x3d, 'trusted'}}]}}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2fb, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) 03:59:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000e00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a0}, [{}], "", [[], [], [], [], [], [], []]}, 0x778) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000e6ffffffffffffff00000000000000000000000000000056a224d571db0000000000000000006b0acff7979d4f7e7b0000d396075237bc91c1c6ffe0ef9610d57769beef157638272048f24f9134572bd65847355a98b45c0a9364753a3108d447231b477f2821e482e5411307e8a61f87b3b91781c78db2"], 0x46) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9d, 0x400000) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000001c0)=""/38) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000300)) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000440)=""/135, &(0x7f0000000080)=0x87) 03:59:20 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000900000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2014.918524] FAT-fs (loop1): bogus number of reserved sectors 03:59:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2014.961465] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2014.979149] FAT-fs (loop2): bogus number of reserved sectors [ 2015.029087] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x81, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000080)=0x2, 0x4) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:20 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000fbffffff00000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2015.131763] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2015.225941] FAT-fs (loop2): bogus number of reserved sectors 03:59:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) keyctl$read(0xb, r2, &(0x7f00000005c0)=""/132, 0x84) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2015.296544] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5451, 0x0) 03:59:21 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0xfffffffffffffffe, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000000000003f}, 0x8) close(r0) 03:59:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:21 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x10000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='wfdno', 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:21 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000048000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000440)={0x8, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x101}}, {{0xa, 0x4e22, 0x0, @loopback, 0x75}}}, 0x108) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x60000000, 0x78}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r2, 0x6, 0x1000}, &(0x7f0000000580)=0xc) 03:59:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2015.627038] FAT-fs (loop1): bogus number of reserved sectors [ 2015.664254] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5452, 0x0) [ 2015.726430] FAT-fs (loop2): bogus number of reserved sectors [ 2015.734164] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2015.802635] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:21 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000009000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004dffffffffffffff00000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:21 executing program 3: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000100)) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f0000000180)=0x1f, 0x4) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x3, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000100000000000000d2fb04ee6eb8b923c53395803a00bb971494590b56554a8a67f38be8ec20ee0bee8a8f75fbce978dddf34af622c941e96b1f6e450f7a55cfe61a22877528", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet6(0xa, 0xb, 0x8000) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:21 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x2f06, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2016.080261] 9pnet: Insufficient options for proto=fd [ 2016.097848] 9pnet: Insufficient options for proto=fd 03:59:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='/dev/sg#\x00', 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xc0, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4d8d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6980}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000000) write$binfmt_elf64(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x78) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200080, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x138, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000000010000000}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x44000}, 0x4080) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) getdents64(r0, &(0x7f00000009c0)=""/231, 0xe7) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:21 executing program 3: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:22 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000200000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2016.230858] FAT-fs (loop1): bogus number of reserved sectors [ 2016.250041] FAT-fs (loop2): bogus number of reserved sectors [ 2016.274015] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2016.310754] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) [ 2016.325826] 9pnet: Insufficient options for proto=fd [ 2016.345679] 9pnet: Insufficient options for proto=fd 03:59:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r1, &(0x7f0000000900)={'#! ', './file0', [], 0xa, "481e84a8fb0f7d17e5750807ccbb4e2989bfa5c4eb12a5ae5b171a7961b6a2"}, 0x2a) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000fefeffffffffffff00000000000000000000000000b9f750fc69151dd72618a8e67ba47396"], 0x30) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/191, 0xbf}], 0x1) socket$packet(0x11, 0x0, 0x300) 03:59:22 executing program 3: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2016.429809] FAT-fs (loop2): bogus number of reserved sectors [ 2016.477451] kauditd_printk_skb: 35 callbacks suppressed [ 2016.477467] audit: type=1804 audit(2000001562.280:3956): pid=19435 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/816/file0/file0/bus" dev="ramfs" ino=262895 res=1 [ 2016.509333] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2016.542569] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2016.593238] 9pnet: Insufficient options for proto=fd [ 2016.628631] 9pnet: Insufficient options for proto=fd 03:59:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000cabd196cbfa7000000000000000100606252ee1d0f9e54a2b3b392c04fdc95852ca575d4720ac792f3237d5ab89b03cafec9acd7a97e116d905c238d46", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:22 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000000000007a000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2016.650574] audit: type=1804 audit(2000001562.330:3957): pid=19459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/849/file0/bus" dev="ramfs" ino=263266 res=1 03:59:22 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 03:59:22 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:22 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xaf0a, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2016.729017] audit: type=1804 audit(2000001562.330:3958): pid=19469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/816/file0/file0/bus" dev="ramfs" ino=262895 res=1 03:59:22 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2016.949524] audit: type=1804 audit(2000001562.750:3959): pid=19506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/850/file0/bus" dev="sda1" ino=17974 res=1 [ 2016.986853] FAT-fs (loop2): bogus number of reserved sectors 03:59:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2002) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:22 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000600000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2017.019283] FAT-fs (loop1): bogus number of reserved sectors [ 2017.073472] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2017.082862] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2017.121606] audit: type=1804 audit(2000001562.870:3960): pid=19507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/817/file0/bus" dev="ramfs" ino=263051 res=1 03:59:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2017.165856] audit: type=1804 audit(2000001562.880:3961): pid=19507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/817/file0/bus" dev="ramfs" ino=263051 res=1 [ 2017.232465] FAT-fs (loop2): bogus number of reserved sectors [ 2017.265137] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 03:59:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000004dffffffffffffff0048c600000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d189fa563ec27d8db0be62b111fb69bc7dbb00008abf1fa0ae058fcef3ba5100000000000000003b7462a2f8eaeb0bc1c8bc26197747360e427923a2888d47bdedb99c5ac4e8e7597dbc6e97e4586db40f12a9e0221b03c4bdb741576b6cea739486a1e4beafc3a5742e2efe0c0c"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2017.364132] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2017.399960] audit: type=1804 audit(2000001563.090:3962): pid=19537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/850/file0/bus" dev="sda1" ino=17974 res=1 [ 2017.477349] audit: type=1804 audit(2000001563.120:3963): pid=19544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/850/file0/bus" dev="sda1" ino=17974 res=1 03:59:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="20526ef2a30f63205f563266fd000000000000000000000000000000a5bac38b837096334947e8c36d35487f138721e73e6aa1e87d25faa87aa020e802fba1f066d3a1e3c2ef782f96f7e9935ac866fd9f3bc322eb6f793eb885726ae9a5495d2d8b76b61413135866e15f08bb788200655293a947f0e6818ea9912ebc91dec8be88609fbc9e7e0df6e8d120ef1651b605d9a3a574eb5e62bdcdd9a18b4d95366e42c3cc72f1cb5a8790c885ca3ece6f0f5995c6e1b7444b48760b4c1b2545bcf902"]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:23 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000004000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:23 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x317, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2017.524588] audit: type=1804 audit(2000001563.150:3964): pid=19511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/817/file0/file0/bus" dev="ramfs" ino=263078 res=1 03:59:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000000440)="a11ead1f3dfda103e2a1c7cd39ea2b822c5ee1ffaa9d148f5a258eab2a1b59cd308dcf519b47d2e11651000651d9f4ff2425f927f4f06780c7b0ef680d5860befdc8f8b26fb9c35e26299174ef733f6ae853", 0x52}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000080)="b7a445749df3731170c219", 0xb}, {&(0x7f00000001c0)="3bf7a0af6a0e25ec707d9c2af41d2e9e2c3f8da9a9d8b0a5375deb491a4e", 0x1e}, {&(0x7f00000004c0)="055f35c5f6c0ff4687d438651345d53104c6c53fb5e9b6f39567bf156398207efb860f4b094f164ea9df35a364331de423297a10fa5da023eb54fed7ea7980be56", 0x41}, {&(0x7f0000000540)="206b14879b3a", 0x6}, {&(0x7f0000000580)="1865728d538c52037149891e4e098487d2be904243596fb4edf9ae357b392a721a571cac242f53dee70c9ed7b72a45189ad6d7a89a3042d149b3", 0x3a}, {&(0x7f0000001640)="42fdb9e71cefa637327877d2887788fddc97e39c7526da2a62f93a01be5ac1cf3b52457c19ce8ae02ee4e0c04f8590d5534004cc05eda0cb064a15d74b4c0f48f3c078142d55e7ebc4e0f068601b233746a52193e405733ade", 0x59}, {&(0x7f00000016c0)="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", 0xff}, {&(0x7f00000017c0)="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", 0x1000}], 0xa, &(0x7f0000002880)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x19}}, @init={0x18, 0x84, 0x0, {0x1f, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x17}}], 0x58, 0x800}, 0x8000) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x1, 0x3, &(0x7f0000002940)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0], 0xffffffffffffffe9) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) [ 2017.567222] audit: type=1804 audit(2000001563.150:3965): pid=19545 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/817/file0/file0/bus" dev="ramfs" ino=263078 res=1 [ 2017.681344] 9pnet: Insufficient options for proto=fd 03:59:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) [ 2017.731983] FAT-fs (loop1): bogus number of reserved sectors [ 2017.764310] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2017.779428] FAT-fs (loop2): bogus number of reserved sectors 03:59:23 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000500000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2017.807813] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2017.899198] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2018.018695] FAT-fs (loop2): bogus number of reserved sectors 03:59:23 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000005000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:23 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x11f, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe006000000000000) [ 2018.121302] 9pnet: Insufficient options for proto=fd [ 2018.137429] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000026c0)=ANY=[], &(0x7f0000002700)='./file0/bus\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x4, 0x0, 0x4c0dc776, 0x9}, {0x1f, 0x40, 0x5}, {0x80000001, 0x1, 0x8, 0x8}]}) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) clock_gettime(0x0, &(0x7f0000002640)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000024c0)=[{{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000780)=""/222, 0xde}, {&(0x7f0000000880)=""/187, 0xbb}], 0x2, &(0x7f0000000940)=""/238, 0xee, 0x2}, 0x1}, {{&(0x7f00000003c0)=@vsock, 0x80, &(0x7f0000000280)=[{&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000000ac0)=""/88, 0x58}, {&(0x7f0000000200)=""/51, 0x33}], 0x3, &(0x7f0000000480)=""/22, 0x16, 0x800}, 0x6}, {{&(0x7f0000000b40)=@alg, 0x80, &(0x7f0000000580)=[{&(0x7f0000000bc0)=""/134, 0x86}, {&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/89, 0x59}], 0x3}, 0x4}, {{&(0x7f0000000dc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000e40)=""/3, 0x3}, {&(0x7f0000000e80)=""/187, 0xbb}, {&(0x7f0000000f40)=""/44, 0x2c}, {&(0x7f0000000f80)=""/237, 0xed}, {&(0x7f0000001080)=""/166, 0xa6}], 0x5, &(0x7f00000011c0)=""/176, 0xb0, 0x1}, 0x1}, {{&(0x7f0000001280)=@ipx, 0x80, &(0x7f0000001340)=[{&(0x7f0000001300)=""/59, 0x3b}], 0x1, 0x0, 0x0, 0x5}, 0x101}, {{&(0x7f0000001380)=@ax25, 0x80, &(0x7f0000002400)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, &(0x7f0000002440)=""/99, 0x63, 0xff}, 0x100}], 0x6, 0x40, &(0x7f0000002680)={r4, r5+10000000}) close(r0) 03:59:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="00007c28000000000000000000000000320100bbc59afd0000000000000000000800000000000100000000004203f1d8257fa7fa50569324d571db0000000000"], 0x46) 03:59:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2018.290114] FAT-fs (loop1): bogus number of reserved sectors 03:59:24 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000007400000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000006b0acff7979d4f7e7b0000"], 0x46) [ 2018.333674] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2018.370634] 9pnet: Insufficient options for proto=fd [ 2018.461001] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa01000000000000) [ 2018.565986] FAT-fs (loop2): bogus number of reserved sectors [ 2018.593924] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:24 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000002000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x2, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000040)={@local}, &(0x7f0000000080)=0x14) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x4db7, 0x20100) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000d00000000000000000050569324d571db0000000000000000006b0acff79b9d4f7e7b0000"], 0x46) [ 2018.690664] 9pnet: Insufficient options for proto=fd 03:59:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2018.761289] FAT-fs (loop2): bogus number of reserved sectors 03:59:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) [ 2018.808293] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2018.910331] FAT-fs (loop1): bogus number of reserved sectors [ 2018.924110] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x61b, 0x109000) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000780)={@xdp={0x2c, 0x4, r5, 0x4}, {&(0x7f0000000280)=""/60, 0x3c}, &(0x7f00000003c0), 0x7d}, 0xa0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000340)={{0x2, 0x3, 0xffffffffffffff00, 0x2, 0x6}, 0x100, 0x9286, 0xfff}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140), 0x800000) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2018.950527] 9pnet: Insufficient options for proto=fd 03:59:24 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000003000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7401000000000000) 03:59:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x101, 0x401, 0x837f, 0x4, 0x3, 0x3e, 0x5, 0x185, 0x38, 0x22c, 0x40, 0x0, 0x20, 0x2, 0xfffffffffffffffd, 0x100, 0x8}, [{0x7, 0x6, 0x6, 0x2, 0x9, 0xfffffffffffffffa, 0x5, 0x200000}], "ba68c74ec979a1af3d9b88a6550d0c197d5b90729cbf91d393c84b755cd30eeecad66f48ed94b63a769292fa72294982ba357eb42f201a31aab2847fd7c5fdfdd56dbbed3fafde2e98c142c8b3f850270f9975e3018073b7a78ac43b282492b898e14bfcf67163b8368ad952d90c533fcd64aec0321d3a1a9c78c3252fe83fcc231e5480c727e6f759cf05c764272ddebc3d6d6869512ee3466707d33d9d052b5de88fc9", [[], [], [], [], []]}, 0x5fc) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2019.218456] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 2019.294552] sg_write: data in/out 2130772194/1486 bytes for SCSI command 0x40-- guessing data in; [ 2019.294552] program syz-executor0 not setting count and/or reply_len properly 03:59:25 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000048000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2019.347975] 9pnet: Insufficient options for proto=fd [ 2019.377170] sg_write: data in/out 2130772194/1486 bytes for SCSI command 0x40-- guessing data in; [ 2019.377170] program syz-executor0 not setting count and/or reply_len properly 03:59:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xffffffffffffff7c) socketpair(0x19, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCEXCL(r1, 0x540c) [ 2019.435644] FAT-fs (loop2): Unrecognized mount option "" or missing value 03:59:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2019.705976] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:25 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x870b0000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x410101c0) 03:59:25 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000003400000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) socketpair(0x9, 0x0, 0x1f0000000000, &(0x7f0000000000)) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:25 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f0000000080), &(0x7f0000000200)=""/208}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000000000000000000000800000"], 0x46) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000004c0)=""/136, &(0x7f0000000080)=0x88) 03:59:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2019.875657] FAT-fs (loop2): bogus number of reserved sectors 03:59:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x413) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000200000000000000000000000000020002c05d984b65882ee6467b66dbcaed3c80b44c46811ecf1dfdbd571db000000000000"], 0x46) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x9) 03:59:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2019.923297] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2019.968395] FAT-fs (loop1): bogus number of reserved sectors [ 2020.005986] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:25 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000003f000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000beb92f3d3699095f780000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x77020000) [ 2020.178576] FAT-fs (loop2): bogus number of reserved sectors 03:59:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2020.222578] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2020.265635] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:26 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x87020000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:26 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000006800000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x400, 0x2) connect$bt_rfcomm(r1, &(0x7f00000005c0)={0x1f, {0xdb35, 0x9, 0x7, 0x1, 0x50e, 0xbfa8}, 0x100000000}, 0xa) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x66, &(0x7f0000003680)=""/102}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x3, 0x24, 0x0, &(0x7f0000000380)}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f00000004c0)={0x90, 0x0, 0x4, {0x3, 0x0, 0x9, 0x82, 0x0, 0x3341, {0x3, 0x100, 0x81, 0x100000000, 0xbb, 0x2e68, 0xa16, 0x1, 0x61, 0x100000001, 0x2, r3, r4, 0xa814, 0x7}}}, 0x90) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000340)=""/143) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc0010015) 03:59:26 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000200000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2020.572412] FAT-fs (loop1): bogus number of reserved sectors [ 2020.602163] FAT-fs (loop2): bogus number of reserved sectors 03:59:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000050569324d571db0000000000000000006b0acff7979d4f7e7b0000000000"], 0x46) [ 2020.654138] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2020.660128] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:26 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x103000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r0, 0x8000000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0xda, "3caad8f3f1d562831c717825042fa418eb49e49d48aa3c89f11d30c56b1041f0779ab7becb2ed136e4ea8e5ad136985c362c44269c92d7a383b332c4549da30e3f76902d47dbba3958d32271ead2945bc419125d65e1e86cef387a2cbeffc651fbd36094058065aa083d430438134b15a869f22307f7932f498831478e4726cd60115162fea5d6888ccdb013b3f410781bdc1682811eff791bc01d37e67551526ba9855494cb2e3a6d36c61aef2121ed10f96fe04942fce1707631ccfc8e1e4cfb5afe072991e0499be68a06f9a3dde23d5fa75b8371949e6532"}, &(0x7f0000000180)=0xe2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r3, 0x9}, 0x8) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$int_out(r4, 0x5462, &(0x7f0000000100)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000000000000000000006000000010000800000000000000000ffbba9f8f2db8ab8a68bdc25692eb7ee3608863007f9bdce621849c0495edea97be8d7d4a78e470f404955688fd565616179c0b39284abd409dcdd7db5b6ac57ff95090cb1ddd9a8c7098942778e949a6e56565a58b4ed1825142832f9e6247a0064793610f150892073b154eafff7e919a7aac107418914d6f180bfe2c464fcfef26c21429c112d0ff6e6611b6e328bdf862333e8eb78fcb5aac15862a9138f8c7624f2407f63405beb5cf9006f434eb55cc94f2f68c70fb8075412c9c364e97d1e3735b0f08f93830b3c591339"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r5) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x640000000000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2020.857080] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:26 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xb7080000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:26 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000007400000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) socketpair(0x1, 0xe, 0x81, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) 03:59:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x480) 03:59:26 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000900000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2021.123750] FAT-fs (loop2): bogus number of reserved sectors 03:59:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2021.178797] FAT-fs (loop1): bogus number of reserved sectors [ 2021.219647] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2021.224541] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x38, 0x0, 0x0, 0xffffffffffffffff}, [{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000c2bc8061eb66e3959c0000950ea50a019400000000001fe562ecc9d78f9b569324d571db0000000000075394d88ce55a02c4aadd822dfd95e577bf42ec0c035d2b664c742b1b09793e"], 0x46) r1 = socket(0x9, 0x1, 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000780)={&(0x7f00000006c0)=""/187, 0xa000, 0x1000, 0x5}, 0x18) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7ff, 0x501000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000680)={0x3, 0x0, &(0x7f00000004c0)=""/203, &(0x7f00000005c0)=""/88, &(0x7f0000000640)=""/19, 0xf000}) prctl$intptr(0x24, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) [ 2021.326652] FAT-fs (loop2): bogus number of reserved sectors [ 2021.336995] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:27 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000040030000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2021.430103] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x97070000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000087) shutdown(0xffffffffffffffff, 0x40000000000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {0x2, 0x0, @loopback}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000180)={0x6, 0x4, 0x5fd6}) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000000)=0x7f) close(r0) 03:59:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc0011022) 03:59:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x10440, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000440)={'icmp6\x00'}, &(0x7f0000000480)=0x1e) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}]}, 0x78) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0xa0040) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x6, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:27 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000004000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2021.764917] FAT-fs (loop1): bogus number of reserved sectors [ 2021.793178] FAT-fs (loop2): bogus number of reserved sectors 03:59:27 executing program 0: r0 = open(&(0x7f00000006c0)='./file0\x00', 0x20000, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000700)={0x20, 0xff00000000000000, 0x3f, 0x7fffffff, 0x4}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dsp\x00', 0x7ffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000780)=0x2, 0x4) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000007f370000000000000000000000000000000000000000000000004dffffffffffffff000000000000000000000000000038000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2000) getresuid(&(0x7f0000000080), &(0x7f00000001c0)=0x0, &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000680)) write$FUSE_ENTRY(r3, &(0x7f00000005c0)={0x90, 0x0, 0x5, {0x3, 0x0, 0x100000001, 0x7, 0x6, 0x80, {0x6, 0x7, 0x8000, 0x0, 0x44, 0x101, 0xfffffffffffff001, 0x5, 0x4efc, 0x401, 0x80000000, r4, r5, 0x6, 0x10001}}}, 0x90) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000440)={0x7b, 0x0, [0x8, 0x2, 0x6, 0x80000000]}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 03:59:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2021.829774] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2021.838536] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2021.866489] kauditd_printk_skb: 34 callbacks suppressed [ 2021.866504] audit: type=1804 audit(2000001567.670:4000): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/857/file0/bus" dev="ramfs" ino=265103 res=1 [ 2021.903639] audit: type=1804 audit(2000001567.700:4001): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/824/file0/bus" dev="ramfs" ino=265522 res=1 [ 2021.974701] audit: type=1804 audit(2000001567.700:4002): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/824/file0/bus" dev="ramfs" ino=265522 res=1 03:59:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2022.019215] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:27 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000400000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2022.058395] audit: type=1804 audit(2000001567.810:4003): pid=20021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/857/file0/bus" dev="ramfs" ino=265536 res=1 03:59:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x8f00, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000004000000000200000000000000000000000691af9960000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) 03:59:28 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8004) 03:59:28 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000074000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:28 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2022.354460] FAT-fs (loop2): bogus number of reserved sectors [ 2022.363593] FAT-fs (loop1): bogus number of reserved sectors [ 2022.390350] audit: type=1804 audit(2000001568.190:4004): pid=20038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/825/file0/bus" dev="ramfs" ino=265166 res=1 [ 2022.441432] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2022.466936] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2022.481100] audit: type=1804 audit(2000001568.230:4005): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/858/file0/bus" dev="ramfs" ino=265165 res=1 03:59:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2022.515703] audit: type=1804 audit(2000001568.230:4006): pid=20038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/825/file0/bus" dev="ramfs" ino=265166 res=1 [ 2022.599578] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2022.612613] FAT-fs (loop2): bogus number of reserved sectors 03:59:28 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2022.637140] audit: type=1804 audit(2000001568.370:4007): pid=20043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/858/file0/bus" dev="ramfs" ino=265666 res=1 03:59:28 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000fffffffd000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2022.698194] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000004dffffffffffffff0000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000680)={0xffffffffffffffff}, 0x106, 0x1004}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000700)={0x1, 0x10, 0xfa00, {&(0x7f00000005c0), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x10102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r4, 0x4}}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x101000, 0x0) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x444440, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000001c0)=r6) [ 2022.764541] audit: type=1804 audit(2000001568.470:4008): pid=20045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/825/file0/file0/bus" dev="ramfs" ino=265183 res=1 03:59:28 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xffffffff00000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="e0db0c356d361823e60b712d2cc13b655d2a6ea186ef129ce6aeac531e87919d20e69c04c1c30f2a56b6941c064e9a62fd2720676f2fa54d566c57b1616ef056e57e16fab83ea71bc9ab38c16f3fde3b3bd4edf3340e", 0x56, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback, 0x1000000000}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000780)={0x0, 0x0, 0x6, 0x80000001, 0x5, [{0x2, 0x1800000000, 0xffffffff, 0x0, 0x0, 0x500}, {0x7, 0xee6, 0x8, 0x0, 0x0, 0x100}, {0x8, 0x10000, 0x6, 0x0, 0x0, 0x200}, {0xde7, 0x6, 0x2, 0x0, 0x0, 0x2200}, {0xf18, 0x0, 0xff, 0x0, 0x0, 0x100}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2022.861857] audit: type=1804 audit(2000001568.470:4009): pid=20081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/825/file0/file0/bus" dev="ramfs" ino=265183 res=1 03:59:28 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:28 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000000000003f0000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc100000000000000) 03:59:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[], 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 2023.072951] FAT-fs (loop1): bogus number of reserved sectors [ 2023.106403] FAT-fs (loop2): Unrecognized mount option "àÛ 5m6#æ q-" or missing value 03:59:28 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2023.129439] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:29 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000340000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2023.215675] FAT-fs (loop2): Unrecognized mount option "àÛ 5m6#æ q-" or missing value [ 2023.299368] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000440)={0x1, {r2, r3+30000000}, 0x7fff, 0x8}) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) 03:59:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x0, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)="0000000080", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB='inode_readahead_blks=0']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:29 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x670a0000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100c0) 03:59:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffd, 0xffffffffffffff50, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x7a62, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000915c6334e4dfc6e948bab4264624d571db00ebffffff000000006b0acff7979d4f7e7b00008b60b7d19ee30600000000000000fd6c9b1f90980f9faf873278c52a81f631f4ae970f6587851b39de0d821ea13ae48737a0c694db9ff470cc7959e977cc6d07dd9d3ca498732aeb20d24841630cb661521e689de3bd3c9d236a3d7b58c2a85c872b966f48fd8c43694af2663c5e3e4cc5cc04000000000000007eb9f972ea15433f3a244d7b69a428b0ce11de260a01c32f7009f8e06e0e"], 0x46) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x2000) 03:59:29 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000034000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2023.647070] FAT-fs (loop2): bogus number of reserved sectors [ 2023.657486] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2023.683375] FAT-fs (loop1): bogus number of reserved sectors 03:59:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @broadcast}], 0x10) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2023.717246] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4001) 03:59:29 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000002000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2023.936640] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 2023.968227] FAT-fs (loop2): bogus number of reserved sectors 03:59:29 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x81000147) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x7f, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @pic={0x14, 0x6, 0x3f, 0x80000000, 0xfffffffffffffffb, 0x5, 0x8, 0x13, 0x7fff, 0x1ff, 0x72f7daef, 0xffffffffffffffff, 0x7, 0x4, 0x7fff, 0x101}}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b00cff7979d4f7e7b0000"], 0x46) [ 2024.019516] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2024.025435] 9pnet: Insufficient options for proto=fd 03:59:29 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x77060000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000000000000058240006000000010000800000000000000000"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x10000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x4) close(r0) 03:59:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7f04000000000000) 03:59:30 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000009000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2024.260551] 9pnet: Insufficient options for proto=fd 03:59:30 executing program 0: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x6, 0x2000) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000000000000000000000003800000000000000000000000052d79ae406c046250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2024.293511] FAT-fs (loop1): bogus number of reserved sectors [ 2024.357821] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:30 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2024.399654] FAT-fs (loop2): bogus number of reserved sectors 03:59:30 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000ffffff800000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2024.448430] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2024.507783] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:30 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40)) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000c40)=0x70) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000a80)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [{0x8, 0x4, r1}, {0x8, 0x0, r2}, {0x8, 0x4, r3}, {0x8, 0x4, r4}, {0x8, 0x0, r5}, {0x8, 0x0, r6}, {0x8, 0x4, r7}, {0x8, 0x7, r8}, {0x8, 0x1, r9}], {0x10, 0x1}, {0x20, 0x8654e57c46d8e9b}}, 0x6c, 0x2) r11 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r11, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r11, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) syz_mount_image$msdos(&(0x7f0000000b00)='msdos\x00', &(0x7f0000000b40)='./file0\x00', 0x6, 0x0, &(0x7f0000000b80), 0x10000, &(0x7f0000000bc0)={[{@nodots='nodots'}], [{@obj_user={'obj_user', 0x3d, ','}}, {@smackfshat={'smackfshat', 0x3d, '/dev/sg#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'system.posix_acl_default\x00'}}]}) write$binfmt_aout(r11, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2024.575710] 9pnet: Insufficient options for proto=fd 03:59:30 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:30 executing program 2: socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x40, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100040a0}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="78000000000000000300000000000000a99a324fc85ec718a2811d0201230615dfd30e070000000000000100000000000000070049903d4c3dcf0a9761ba537000000000000007000000000000000100000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="5b19c319400273f024a7fd8ca553ac85dd7244fcbce75eefb6a180e4a66c0e127b1b39ab5d9933b713b2bc81d61a90d6c5dcb3c421cbd1692c86cbbd364b3529bb642115a79b989289510c63dd4d6db932ba7d285ac3d684d230e8e6c16345c9a35c552ad93a99c210c48033eddf43c3924847d071908f24500584ea6bb06ab635875b5eca1b94ade3ba", 0x8a}], 0x1}, 0x4840) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000600)={r0, 0x0, 0x5, 0x2, 0x7}) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x1413fc, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000280)={0x9, 0xe1e4}) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f00000005c0)=0x1) dup2(0xffffffffffffffff, r1) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000018c0)=""/4096) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000210000000000000000000006000000010000800000000000000000"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:59:30 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x7f0d, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8601000000000000) 03:59:30 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000007000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2024.726189] FAT-fs (loop0): Unrecognized mount option "obj_user=" or missing value [ 2024.799301] 9pnet: Insufficient options for proto=fd 03:59:30 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2024.885936] FAT-fs (loop1): bogus number of reserved sectors [ 2024.895131] FAT-fs (loop0): Unrecognized mount option "obj_user=" or missing value [ 2024.907614] FAT-fs (loop2): bogus number of reserved sectors [ 2024.928303] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2024.958529] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = msgget$private(0x0, 0x10) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000440)=""/252) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2025.030072] 9pnet: Insufficient options for proto=fd 03:59:30 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000ffffff80000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2025.057730] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 2025.077787] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 2025.103114] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x200001c0) 03:59:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x3fffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000440)={0x3, 0xfff}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1300000000000000000000000000000000000000000000000000000000000000000000000000000000001a50569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x6) r3 = msgget(0x2, 0xc2) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000780)=""/78) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) bind$nfc_llcp(r1, &(0x7f0000000480)={0x27, 0x1, 0x0, 0x0, 0x7, 0x100000001, "79ec342acd3cddef87e22b6cf33d2e4121eba82026d348dff934639ec4f22bd49f110055ecd26e9a56f835d9c025a2efa4ba2cce3e46a324048bdbc4ba0e9b", 0xb}, 0x60) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0x7}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000740)={r4, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e24, 0x10001, @mcast1, 0x8}}, 0x1f, 0x6, 0x5, 0x1f, 0x2}, &(0x7f00000005c0)=0x98) prctl$setmm(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) 03:59:31 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x3f0b, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2025.319200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2025.327189] 9pnet: Insufficient options for proto=fd [ 2025.347690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:59:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2025.470239] FAT-fs (loop1): bogus number of reserved sectors [ 2025.501372] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2025.705901] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2025.726338] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 2025.736960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:59:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) 03:59:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:59:31 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000400000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000b80)=""/163) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x80000000, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000340)="43555609a70aab88e0ff2eae67d8b6acea588fe568539bf17c97934c0234b0f4c83ce190a5f01b084503d5ff750458a10ce3c6b9e5efa7058e34657de02424bc4d2103209447711a4acee3eca856ca24de4ac532b78b9579b55d4775f0bb3e7c52ee7a01983740b06163e0936c1ce38fb547a33ccc136b2a07f1efb65f8d37e9e706829a98893728c3799f9abe55b6439f775bd388509a", 0x97, 0x889}, {&(0x7f0000000180), 0x0, 0x17}, {&(0x7f0000000200)="665d520ed89dc5c7fc0fc0a5129cbaecb5d0afd21f89c0d8e65ab766eaf4f3033f0477267a", 0x25, 0x16b0}, {&(0x7f0000000780)="cb9e6c33030ea6ea2ee746ebbd54342b05e72b13630084134837ef1435e9cd5b324864cd442a7197064972cd4e33dcda75ede652a825efb85520329815363cd6499a9d2ddd6b91466b040da92ed8b4f07e7f35bc13505dac995f9a01c2cdadc9ba850865f0f4b93991f41be5cbc3ac0d86634a1402f36509ee86c1872fa0f8cb8eefd4e43663aa47f79326b1c1818e4e6db6759dc20aefd2a87ab43ef56f46ce1ac54c851a6624662cbef1bc04982e9e283c0416fc6fa8c64f3c6045", 0xbc, 0xfffffffffffffffc}, {&(0x7f0000000840)="fd482319816612796ca3b008ac439012d8369e6f236351e894b462b3807e7c1c74536f0ced7d2d9092b516f63b6217e91b26a7fd52e64a0453082557a971d3ae54c4940ed0eccaa1e6204efefc8d2c058276aaa737f9c740f7def9ce0c62310eb719a3a8fce8cb8d9336", 0x6a, 0x6f4e}, {&(0x7f00000008c0)="7e0c1f7553e9d321b0a73014cfbaff36a8fc264c84ab6debcb3c3de471b4faadb9d44824fea38521d9a48ed1e7b95961d9a8909a0fa87e79645bdb721edf3a002580e680bac830d880ace9ab4549bc1295906c0f0fa02779f6c88b9121bb392d5fe7c2a33e19219a70ea25918a46d0624e6bd0473b721bcd90caa427274aea2012ad98c293cd931c096129d34a91ace7e383d25f33b449e5f5244e8edc92e84c38f1a8f22101f87e9cfece8f2a241870bb9b9199f6174347ed9b5fac299b1348b99199bb9aa706ac9bef4fd2022c2998ea70822c1681c5f268c789f1f43cf0e1593d65d0809501924ceca24d", 0xec}, {&(0x7f00000009c0)="219f045f2b5f7009ab7ce1a0b8bd8ddd2a4d22215f9082d0e231eea98ca3e5f613685728d799d721951152bb8dd4644848a740760c57ff3f4b8b5be2e2f4a5919c5829a96c4ded078e55fa019151eddd7a686bdbc6dd329f05e4b5e58373f3ce195d953d1ebed3540e9afe9edc442da6a34ce6eac21724a5f62367263e3a09159b572e97a0d02dfe75ef36e030fd4f2d9df4042da1d5f6ba98e160dbde3cf7795c6ea053f6661d631d38537f32a96bb37258fe4238bad95bb138238a7b73eab329806f6faff439", 0xc7, 0x3}, {&(0x7f0000000280)="fa9100e0c432099373b6c6d090c8d23a769631e939d043b1b2ecbf7bc97c66f93059679210", 0x25, 0x1}], 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d342c63726561746f723d44225fc42c71756965742c747970653df77b84532c736d61636b66736465663d5c707070306c6f766d6e6574312c6d61332f4898b9d88eea3d46727e91fcb1686b3d5e4d41595f524541442c0024c9993447d96a7a2a4ebad2b6fe540816aa1d15e012822d143fdc4f71"]) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000180)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000400)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000480)={@ipv4={[], [], @rand_addr=0x401}, r3}, 0x14) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='Wogon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:31 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x797, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4d564b) 03:59:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:59:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000480)=0x1) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) sendfile(r0, r0, &(0x7f0000000440), 0xfa) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x200, 0x6000) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r2) 03:59:31 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000480000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2025.969156] FAT-fs (loop2): bogus number of reserved sectors [ 2026.005047] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2026.075785] FAT-fs (loop1): bogus number of reserved sectors [ 2026.087700] hfs: unable to parse mount options [ 2026.115882] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2026.179610] FAT-fs (loop2): Unrecognized mount option "CUV § [ 2026.179610] «ˆàÿ.®gض¬êXåhS›ñ|—“L4°ôÈ<á¥ðEÕÿuX¡ ãƹå硫4e}à$$¼M! ”GqJÎãì¨VÊ$ÞJÅ2·‹•yµ]Guð»>|Rîz˜7@°acà“lãµG£<Ìk*ñï¶_7éç‚š˜‰7(ÃyŸš¾U¶CŸw[ÓˆPš" or missing value 03:59:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f444c460000000000000000000000000002004dffffffffffffff0000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000"], 0x78) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101000, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xfffffffffffffe24) 03:59:32 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000070000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:32 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 2026.304874] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x40010000) [ 2026.388534] hfs: unable to parse mount options 03:59:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10011, r0, 0x4c) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x6, 0x408200) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000029c0)) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x323) 03:59:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaa85f, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:32 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x1703000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:32 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000002000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:32 executing program 3: socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x40, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100040a0}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="78000000000000000300000000000000a99a324fc85ec718a2811d0201230615dfd30e070000000000000100000000000000070049903d4c3dcf0a9761ba537000000000000007000000000000000100000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="5b19c319400273f024a7fd8ca553ac85dd7244fcbce75eefb6a180e4a66c0e127b1b39ab5d9933b713b2bc81d61a90d6c5dcb3c421cbd1692c86cbbd364b3529bb642115a79b989289510c63dd4d6db932ba7d285ac3d684d230e8e6c16345c9a35c552ad93a99c210c48033eddf43c3924847d071908f24500584ea6bb06ab635875b5eca1b94ade3ba", 0x8a}], 0x1}, 0x4840) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000600)={r0, 0x0, 0x5, 0x2, 0x7}) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x1413fc, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000280)={0x9, 0xe1e4}) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f00000005c0)=0x1) dup2(0xffffffffffffffff, r1) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000018c0)=""/4096) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000210000000000000000000006000000010000800000000000000000"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:59:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x100, 0x1) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x78) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000340)=0x4, 0x4) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000780)=""/241, 0xf1}, {&(0x7f0000000880)=""/65, 0x41}], 0x6, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000440)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="000001000000000000000000000000000000ee00000000000000000000000000000000000000000000001450569324d571db007b0000"], 0x46) [ 2026.756441] FAT-fs (loop1): bogus number of reserved sectors [ 2026.794971] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xcd) 03:59:32 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000fffffffd0000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x3) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2026.907626] FAT-fs (loop3): bogus number of reserved sectors [ 2026.922052] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2026.946803] kauditd_printk_skb: 31 callbacks suppressed [ 2026.946819] audit: type=1804 audit(2000001572.750:4041): pid=20520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/864/file0/bus" dev="ramfs" ino=267035 res=1 [ 2026.976121] FAT-fs (loop3): Can't find a valid FAT filesystem 03:59:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x4, 0x3, 0x7, 0x2}) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) [ 2027.078395] audit: type=1804 audit(2000001572.800:4042): pid=20496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/832/file0/file0/bus" dev="ramfs" ino=267036 res=1 03:59:32 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x7df, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:32 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2027.239027] FAT-fs (loop2): bogus number of reserved sectors [ 2027.249401] audit: type=1804 audit(2000001572.800:4043): pid=20505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/832/file0/bus" dev="ramfs" ino=267018 res=1 [ 2027.257286] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2027.302566] audit: type=1804 audit(2000001572.980:4044): pid=20510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir784994285/syzkaller.T3xel4/957/file0/bus" dev="ramfs" ino=267107 res=1 [ 2027.362665] 9pnet: Insufficient options for proto=fd [ 2027.382124] audit: type=1804 audit(2000001573.140:4045): pid=20555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/865/file0/bus" dev="ramfs" ino=267807 res=1 [ 2027.432970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2027.442733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2027.449476] FAT-fs (loop2): bogus number of reserved sectors [ 2027.449488] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2027.466931] FAT-fs (loop1): bogus number of reserved sectors [ 2027.474175] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x40}, [{0x0, 0x9, 0x200000000000000, 0x0, 0x0, 0x0, 0x1, 0x8}], "", [[], []]}, 0x278) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000001450569324d571db0000000000000000006b0acff7979d4f7e7b0000"], 0x46) [ 2027.482911] audit: type=1804 audit(2000001573.250:4046): pid=20563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/865/file0/bus" dev="ramfs" ino=267815 res=1 [ 2027.547377] audit: type=1804 audit(2000001573.350:4047): pid=20556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/833/file0/bus" dev="ramfs" ino=267129 res=1 03:59:33 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xfe7f0000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200000008800000007c2fd288af7f09ba3a48f1f873c64ca023760000000600000001000080040000000000000036d3500000"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2027.670540] audit: type=1804 audit(2000001573.380:4048): pid=20556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/833/file0/bus" dev="ramfs" ino=267129 res=1 [ 2027.741927] FAT-fs (loop1): Unrecognized mount option "2" or missing value 03:59:33 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x4680000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2027.855267] FAT-fs (loop2): bogus number of reserved sectors [ 2027.861157] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2027.873171] FAT-fs (loop0): bogus number of reserved sectors [ 2027.883828] audit: type=1804 audit(2000001573.680:4049): pid=20589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/866/file0/bus" dev="ramfs" ino=267150 res=1 [ 2027.888399] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2027.963098] FAT-fs (loop2): bogus number of reserved sectors [ 2028.004303] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2028.037915] audit: type=1804 audit(2000001573.730:4050): pid=20580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir546486917/syzkaller.l60PjF/2131/file0/bus" dev="ramfs" ino=267854 res=1 [ 2028.068330] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! [ 2028.090774] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! [ 2028.097696] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! 03:59:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2000000008912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x5) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x73a06d8ed80162b2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) 03:59:33 executing program 0 (fault-call:8 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x17a) 03:59:33 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000001000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2028.193642] FAT-fs (loop1): bogus number of reserved sectors 03:59:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000000000000006000000010404000000000000000000072102d2b7b4773909ce350856dc0d4818d4a371a3454986a5d27a2c0750c5e785f977852708ac21b3216bc4c629b53d9f93728cff0986a41f853de8499c5f4bec54e030d9e9a7b50852a9"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2028.237455] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2028.248036] FAULT_INJECTION: forcing a failure. [ 2028.248036] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.274171] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! [ 2028.304272] CPU: 1 PID: 20613 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #293 [ 2028.311694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2028.321062] Call Trace: [ 2028.321095] dump_stack+0x1c4/0x2b4 [ 2028.321119] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2028.321142] ? find_held_lock+0x36/0x1c0 [ 2028.321179] should_fail.cold.4+0xa/0x17 [ 2028.321203] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2028.321222] ? check_preemption_disabled+0x48/0x200 [ 2028.321247] ? graph_lock+0x170/0x170 [ 2028.321268] ? find_held_lock+0x36/0x1c0 [ 2028.350904] ? __f_unlock_pos+0x19/0x20 [ 2028.350926] ? find_held_lock+0x36/0x1c0 [ 2028.350960] ? ___might_sleep+0x1ed/0x300 [ 2028.358810] ? kasan_check_write+0x14/0x20 [ 2028.358841] ? arch_local_save_flags+0x40/0x40 [ 2028.358865] ? wait_for_completion+0x8a0/0x8a0 [ 2028.358887] __should_failslab+0x124/0x180 [ 2028.375308] should_failslab+0x9/0x14 [ 2028.384481] kmem_cache_alloc+0x2be/0x730 [ 2028.384500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2028.384519] ? check_preemption_disabled+0x48/0x200 [ 2028.384539] getname_flags+0xd0/0x5a0 [ 2028.384559] user_path_at_empty+0x2d/0x50 [ 2028.384577] do_fchmodat+0xa3/0x160 [ 2028.384592] ? __ia32_sys_fchmod+0x80/0x80 [ 2028.384613] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2028.428484] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2028.433969] __x64_sys_chmod+0x5c/0x80 [ 2028.437890] do_syscall_64+0x1b9/0x820 [ 2028.441791] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2028.447171] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2028.452115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2028.456970] ? trace_hardirqs_on_caller+0x310/0x310 [ 2028.462003] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2028.467036] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2028.472073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2028.476935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2028.482126] RIP: 0033:0x457569 [ 2028.485329] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2028.504874] RSP: 002b:00007f253b300c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 2028.512598] RAX: ffffffffffffffda RBX: 00007f253b300c90 RCX: 0000000000457569 [ 2028.519869] RDX: 0000000000000000 RSI: 00000000ffffff8c RDI: 00000000200006c0 [ 2028.527142] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2028.534894] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f253b3016d4 [ 2028.542174] R13: 00000000004bd325 R14: 00000000004cc388 R15: 0000000000000005 03:59:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2900000000000000) 03:59:34 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000068000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000240)) r1 = eventfd2(0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x4000) ioctl$TIOCCONS(r2, 0x541d) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000080)=""/115, &(0x7f0000000400)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000008c0)={0x1, 0x0, &(0x7f00000007c0)=""/225, &(0x7f0000000700)=""/29, &(0x7f0000000740)}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 2028.644147] FAT-fs (loop2): bogus number of reserved sectors [ 2028.651532] FAT-fs (loop1): Unrecognized mount option "0" or missing value [ 2028.652558] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2028.674161] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! 03:59:34 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x5f030000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:34 executing program 0 (fault-call:8 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2028.861088] FAT-fs (loop2): bogus number of reserved sectors [ 2028.874355] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:34 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x1}, 0x1c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20080, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) 03:59:34 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000003000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb000004000000000) [ 2029.059889] FAULT_INJECTION: forcing a failure. [ 2029.059889] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2029.071780] CPU: 0 PID: 20665 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #293 [ 2029.079182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2029.088561] Call Trace: [ 2029.091193] dump_stack+0x1c4/0x2b4 [ 2029.094880] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2029.100144] ? print_usage_bug+0xc0/0xc0 [ 2029.104243] ? __lock_acquire+0x7ec/0x4ec0 [ 2029.108516] should_fail.cold.4+0xa/0x17 [ 2029.112604] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2029.117743] ? __lock_acquire+0x7ec/0x4ec0 [ 2029.122013] ? mark_held_locks+0x130/0x130 [ 2029.126264] ? graph_lock+0x170/0x170 [ 2029.130089] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2029.135655] ? _kstrtoull+0x188/0x250 [ 2029.139467] ? _parse_integer+0x180/0x180 [ 2029.143631] ? graph_lock+0x170/0x170 [ 2029.147441] ? lock_release+0x970/0x970 [ 2029.151421] ? arch_local_save_flags+0x40/0x40 [ 2029.156021] ? find_held_lock+0x36/0x1c0 [ 2029.160092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2029.165635] ? should_fail+0x22d/0xd01 [ 2029.169529] ? get_pid_task+0xd6/0x1a0 [ 2029.173422] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2029.178548] ? check_preemption_disabled+0x48/0x200 [ 2029.183585] __alloc_pages_nodemask+0x34b/0xde0 [ 2029.188268] ? find_held_lock+0x36/0x1c0 [ 2029.192344] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 2029.197379] ? __f_unlock_pos+0x19/0x20 [ 2029.201374] ? find_held_lock+0x36/0x1c0 [ 2029.205467] ? ___might_sleep+0x1ed/0x300 [ 2029.209627] ? trace_hardirqs_off+0xb8/0x310 [ 2029.214062] cache_grow_begin+0x91/0x8c0 [ 2029.218149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2029.223707] kmem_cache_alloc+0x665/0x730 [ 2029.227866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2029.233416] ? check_preemption_disabled+0x48/0x200 [ 2029.238466] getname_flags+0xd0/0x5a0 [ 2029.242281] user_path_at_empty+0x2d/0x50 [ 2029.246442] do_fchmodat+0xa3/0x160 [ 2029.250077] ? __ia32_sys_fchmod+0x80/0x80 [ 2029.254319] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2029.259690] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2029.265153] __x64_sys_chmod+0x5c/0x80 [ 2029.269053] do_syscall_64+0x1b9/0x820 [ 2029.272948] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2029.278332] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2029.283285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2029.288143] ? trace_hardirqs_on_caller+0x310/0x310 [ 2029.293170] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2029.298198] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2029.303228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2029.308088] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2029.313285] RIP: 0033:0x457569 [ 2029.316487] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2029.335747] RSP: 002b:00007f253b300c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 2029.343506] RAX: ffffffffffffffda RBX: 00007f253b300c90 RCX: 0000000000457569 [ 2029.350791] RDX: 0000000000000000 RSI: 00000000ffffff8c RDI: 00000000200006c0 03:59:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x4ed4ceaa, 0x81, 0x1, 'queue0\x00', 0x401}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2029.358075] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2029.365351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f253b3016d4 [ 2029.372628] R13: 00000000004bd325 R14: 00000000004cc388 R15: 0000000000000005 [ 2029.390268] FAT-fs (loop1): bogus number of reserved sectors [ 2029.403144] Unknown ioctl -1072150264 03:59:35 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000fbffffff000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:35 executing program 0 (fault-call:8 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2029.408999] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2029.415609] Unknown ioctl -1072150264 03:59:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_triestat\x00') ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000005c0)={'veth0_to_bond\x00', {0x2, 0x4e21}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x6}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB="4d0000007a9e192be904b520004fc5033a674175df7dd304ca4a732c0beb1f8a8e5912b3eab0d350e56ae8c0e785253105155b1d05e15e466d496e6c4876ac795c3f7fdc837685f1959c747713811917da"], &(0x7f0000000580)=0x55) r3 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0xffffffffffffffff) semget(0x3, 0x0, 0x24) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000180)=""/221) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget(0x0, 0x7, 0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x81, 0x1, 0x3}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r6, 0x62}, 0x8) semctl$IPC_INFO(r5, 0x4, 0x3, &(0x7f00000000c0)=""/85) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) r7 = semget$private(0x0, 0x7, 0xa) semctl$IPC_INFO(r7, 0x2, 0x3, &(0x7f0000000000)=""/26) [ 2029.550942] FAT-fs (loop1): Unrecognized mount option "1" or missing value 03:59:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x40000000) 03:59:35 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000680000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2029.624056] FAT-fs (loop2): bogus number of reserved sectors [ 2029.661364] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:35 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x57050000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:35 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2029.877516] FAT-fs (loop2): Unrecognized mount option "ªÎÔN" or missing value 03:59:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000100)={0x2, 0x800, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e21, @loopback}}) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:35 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000050000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2030.017309] FAT-fs (loop1): bogus number of reserved sectors [ 2030.055262] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:36 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x176) [ 2030.232323] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2030.293179] FAT-fs (loop2): bogus number of reserved sectors [ 2030.314249] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:36 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2cb43b80c60001000000000000fc76657273696f6e3d3970323030302e752c00"]) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:36 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xf00000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:36 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000740000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_triestat\x00') ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000005c0)={'veth0_to_bond\x00', {0x2, 0x4e21}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x6}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB="4d0000007a9e192be904b520004fc5033a674175df7dd304ca4a732c0beb1f8a8e5912b3eab0d350e56ae8c0e785253105155b1d05e15e466d496e6c4876ac795c3f7fdc837685f1959c747713811917da"], &(0x7f0000000580)=0x55) r3 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0xffffffffffffffff) semget(0x3, 0x0, 0x24) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000180)=""/221) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget(0x0, 0x7, 0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x81, 0x1, 0x3}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r6, 0x62}, 0x8) semctl$IPC_INFO(r5, 0x4, 0x3, &(0x7f00000000c0)=""/85) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) r7 = semget$private(0x0, 0x7, 0xa) semctl$IPC_INFO(r7, 0x2, 0x3, &(0x7f0000000000)=""/26) 03:59:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) recvfrom$inet6(r2, &(0x7f0000000340)=""/192, 0xc0, 0x140, &(0x7f0000000100)={0xa, 0x4e21, 0xdc, @mcast2, 0x101}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4) [ 2030.671601] FAT-fs (loop1): bogus number of reserved sectors 03:59:36 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000060000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:36 executing program 0: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fffc) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RSTAT(r1, &(0x7f0000000b00)={0x8c, 0x7d, 0x1, {0x0, 0x85, 0x7, 0x0, {0x10, 0x0, 0x4}, 0x5000000, 0xda4, 0x7f, 0x240000000, 0xb, '^MAY_APPEND', 0x2d, "2673656c6692285e2e6b657972696e6747504c7b40bf285d65746831766d6e657431265c6d643573756d6c6f40", 0x11, 'security.selinux\x00', 0x9, 'trans=fd,'}}, 0x8c) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x3ff}, 0xf) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="540e2309e91bb6f2686e23445f08090000006f01000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) lsetxattr$security_selinux(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='security.selinux\x00', &(0x7f0000000a80)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@ipv4={[], [], @remote}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x5, &(0x7f0000000780)=[{&(0x7f0000000100)="8bbff5d66fa6bd7091f8b40a2415999de0f6f33fab82d5084a2ce6bd340233f8a06979d5c4cf8ab68b1ae440c76b44f5298a3ea568d81ff6d6ffbb236736eda7add6cb2f62ec5ccd9a164f7c1d58462d", 0x50, 0x1}, {&(0x7f0000000400)="e9b879d7b1a48811581eb9cf9d4528aceabf8d4934fa41fc67d82a01513c17a82be0aeac392d9d18728e1bdfcac2132b08e3fd6bda19a2959103a7d89e320fa3e8587e", 0x43, 0x5}, {&(0x7f00000005c0)="bfa0099a81a44c3c8166f5c3a3bb4a8fc60adc279b929d98d6f5443611ea1ee2480c05d32061d1a7f571c24f7e0db0636887efc6a55a4edf79bcc5dd406bda03c50121221e53d0b81b6c56c67ef82cbb626742c74a12f59b01acf351193cecc861a57f068dbe0288bbd2", 0x6a, 0x1}, {&(0x7f0000000640)="eee6c900cc6ec5da95311106ab8e3d13df724e36ebe8ca143c0093c8f40a33ea97c69871d26898ed40631c778313a3c2850dc4a19af86b7bf452edba03b0bc81a607f4cacad7e4a77f21d53cc4c07969ccca4f4b37666c9e07", 0x59, 0x1f}, {&(0x7f0000000700)="d30d1a6d830ab879904267ecdf4755061fa3c5c486dc9e12172bf4f85fc242cf03b30cabb5b2e6fa6aff2d5d64199f2b2ac90813e7b87074778e481c024ea2b82cfea8e41abdb3a83a9b0abac1e444c2bf55c41779d8f973230356e99411", 0x5e, 0x4c69}], 0x10400, &(0x7f0000000940)={[{@uid={'uid', 0x3d, r2}}, {@map_normal='map=normal'}, {@overriderock='overriderockperm'}, {@cruft='cruft'}, {@mode={'mode', 0x3d, 0x9}}, {@map_off='map=off'}, {@unhide='unhide'}, {@nojoliet='nojoliet'}, {@norock='norock'}, {@map_off='map=off'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@seclabel='seclabel'}]}) chmod(&(0x7f0000000ac0)='./file0\x00', 0xffffff8c) getpeername(0xffffffffffffff9c, &(0x7f0000000bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000500)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000c40)={0x7, 0x1, 0x2, 0x5, 0x0}, &(0x7f0000000c80)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000cc0)={r4, @in={{0x2, 0x4e21, @rand_addr=0xff}}, 0x3, 0x8, 0x80, 0x7, 0x8}, &(0x7f0000000d80)=0x98) [ 2030.755023] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x79) [ 2030.818982] FAT-fs (loop2): bogus number of reserved sectors [ 2030.862498] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2030.890462] FAT-fs (loop1): Unrecognized mount option "0" or missing value [ 2030.946020] 9pnet: Insufficient options for proto=fd [ 2030.981945] 9pnet: Insufficient options for proto=fd [ 2031.026729] 9pnet: Insufficient options for proto=fd 03:59:36 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000000000004c0000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:36 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x6701000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2031.080652] 9pnet: Insufficient options for proto=fd 03:59:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file1\x00', 0x20000, 0x20) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:37 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x286, 0x4d, 0x2}, 0x6) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000b40)=""/93, 0x5d) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file1\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000fffc000000000000000007002eb017e9c10768"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) writev(r1, &(0x7f0000000ac0)=[{&(0x7f00000005c0)="643828520634d5a74643df8018b8a007f51e73e9491356810d4e6f2811a71838605cb535b6af8106a9e775dff2bec1c3b74c1a5332c8ea0f4a1c244debb3330564cfbc7a556055a508c6df17380dd3d90d7f7e2fa9ee352903eb5a5aaa9ff8debafba6959e505d807639dffad9ab2f4a8dffdc63dec90f1eef466197eb760e35c1", 0x81}, {&(0x7f0000000700)="a0be4a669d36e1823548b7ac28b7d9c5975d3a289d53e6dac42dcd9e2187d6c25cd4b3f949d16c5c813b9174f02331c8ddbfa58c8e4c539d7d67978bbac47a2e18cdb9369abd9904a0840c661851e178bfb4fce96a32422a2ce757b7c0beb5969ba5195d5077160d31f3f8bf00cfe357305f049d3bd7441f1cfbf6b7e7264c3dbdf8b52a4ab0c54bc61f15f494f0f1ed54c75c9756e5e07d4a74df74132147cda9441dcfa47beedcdbd234d7a274583d1c1d8453f391c84ec8593025b666375056", 0xc1}, {&(0x7f0000000800)="45cbf78cce907a59178be0f8f03a65c881d5d1ed028d1cf7e2f79a3422115d586e63f4ee8b2a8fe01b6069391556588cc85683b9a1e0afd32a4528ea8c09cf6983e76dfe5019e169cf386ac08234bc1964d2fcdd9ddf86bd09f7fc01af1a342d92b0d71411028e6379c6d8df909d0424a3e9e2954de2d40cfe7565ba8873de61e40aa435465de81348d8b283b78509497cd3f19a26b32dfc25a3c8d0476c0672fb5c97881fb641cdf18edd1fda", 0xad}, {&(0x7f0000000940)="f58a50d4907325596033d3e6a8a5384421260f2ce7dee8e5657a9a3f0b2d61cc802ec65b39d51bf1339437ad62120a2b61fa4e48f3f878866af38a34e7e2a8f3131735c4b0fa32c9acb362c999fc079683b385c49535cc5b0339578974393fe8769aee96bad412de9140dde62cc5e1ac0c6155e9a5a394111656e0e44878936aa6de8c0595a363ef3cd09520e8965d02743e36757863a4672044995bb377191a86a73458b1841f45388cb2bf21d7dac5df44e934eb71b8933d8727a6f0e4443718ed0a81b40ae0495f205c7730ee1d7a5e83e4bb417d2c620cdad943839892cda746a190ab5493aa7e9199534102eca77f5e5627e3de5f56", 0xf8}, {&(0x7f0000000a40)="5f2d8294a4c6e1375bb5ec556254c85139f48e06baca62e6d11022e8167c91fbb0a54e32c69175c48d937e69a2a9dfa8b20cc563fc8a193367df463c3342150df6625efb745ea3247b2f4aaf39451f8926da0040f86b292566b8a9ba32998f0a92299e99426ec8d3", 0x68}], 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733dfaffffffffffffff3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) open(&(0x7f0000000680)='./file1\x00', 0x400400, 0x29) chmod(&(0x7f0000000140)='./file0\x00', 0x104) fallocate(r0, 0x0, 0x9, 0x0) [ 2031.340128] FAT-fs (loop1): bogus number of reserved sectors 03:59:37 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000090000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2031.387918] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2031.401195] FAT-fs (loop2): bogus number of reserved sectors 03:59:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_triestat\x00') ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000005c0)={'veth0_to_bond\x00', {0x2, 0x4e21}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x6}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB="4d0000007a9e192be904b520004fc5033a674175df7dd304ca4a732c0beb1f8a8e5912b3eab0d350e56ae8c0e785253105155b1d05e15e466d496e6c4876ac795c3f7fdc837685f1959c747713811917da"], &(0x7f0000000580)=0x55) r3 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0xffffffffffffffff) semget(0x3, 0x0, 0x24) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000180)=""/221) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget(0x0, 0x7, 0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x81, 0x1, 0x3}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r6, 0x62}, 0x8) semctl$IPC_INFO(r5, 0x4, 0x3, &(0x7f00000000c0)=""/85) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) r7 = semget$private(0x0, 0x7, 0xa) semctl$IPC_INFO(r7, 0x2, 0x3, &(0x7f0000000000)=""/26) 03:59:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x34d564b00000000) [ 2031.436599] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2031.445271] 9pnet: Could not find request transport: úÿÿÿÿÿÿÿ=0x0000000000000003 [ 2031.519756] FAT-fs (loop2): bogus number of reserved sectors [ 2031.582124] 9pnet: Could not find request transport: úÿÿÿÿÿÿÿ=0x0000000000000005 [ 2031.593560] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:37 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000048000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2031.634675] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:37 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8040, 0x1) bind$vsock_dgram(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e21}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:37 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x1f01000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1e010000) 03:59:37 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000006000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2031.949346] FAT-fs (loop1): bogus number of reserved sectors [ 2031.962685] kauditd_printk_skb: 28 callbacks suppressed [ 2031.962700] audit: type=1804 audit(2000001577.760:4079): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/839/file0/bus" dev="ramfs" ino=269783 res=1 03:59:37 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000000000000) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x7fd, 0x8002) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x200000, 0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = msgget(0x1, 0x121) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000280)=""/36) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) lsetxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', &(0x7f00000005c0)=@v1={0x2, "fb9563b02765befdd8f07557f1fcbe"}, 0x10, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xffffffffffffffce) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) sendto(r4, &(0x7f0000000080)="aa0aeb7c92b17b5c636038160ee0d07cb45a1a0d4362d70be5546369d1f7d1f52c43317018a0c8233e64334bf93583bcfeb6dade02", 0x35, 0x0, &(0x7f0000000200)=@ll={0x11, 0x1, r5, 0x1, 0x7e, 0x6, @broadcast}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) signalfd(r4, &(0x7f0000000180)={0xda}, 0x8) [ 2032.012427] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2032.070799] FAT-fs (loop2): bogus number of reserved sectors [ 2032.106506] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2032.113363] audit: type=1804 audit(2000001577.810:4080): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/839/file0/bus" dev="ramfs" ino=269783 res=1 03:59:38 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xc70d, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2032.290341] audit: type=1804 audit(2000001577.890:4081): pid=20938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/872/file0/bus" dev="ramfs" ino=269801 res=1 [ 2032.322151] FAT-fs (loop2): bogus number of reserved sectors [ 2032.347932] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:38 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) fgetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f00000005c0)=""/163, 0xa3) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x1f00000000000000, 0x8880) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000180), &(0x7f0000000400)=0x18) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x3, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x2820c0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x2) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2032.377688] audit: type=1804 audit(2000001578.080:4082): pid=20926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/872/file0/bus" dev="ramfs" ino=269817 res=1 [ 2032.394177] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! 03:59:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_triestat\x00') ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000005c0)={'veth0_to_bond\x00', {0x2, 0x4e21}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x6}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB="4d0000007a9e192be904b520004fc5033a674175df7dd304ca4a732c0beb1f8a8e5912b3eab0d350e56ae8c0e785253105155b1d05e15e466d496e6c4876ac795c3f7fdc837685f1959c747713811917da"], &(0x7f0000000580)=0x55) r3 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0xffffffffffffffff) semget(0x3, 0x0, 0x24) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000180)=""/221) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget(0x0, 0x7, 0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x81, 0x1, 0x3}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r6, 0x62}, 0x8) semctl$IPC_INFO(r5, 0x4, 0x3, &(0x7f00000000c0)=""/85) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) r7 = semget$private(0x0, 0x7, 0xa) semctl$IPC_INFO(r7, 0x2, 0x3, &(0x7f0000000000)=""/26) 03:59:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x11000000) 03:59:38 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000068000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2032.624355] FAT-fs (loop1): bogus number of reserved sectors [ 2032.648459] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2032.672525] FAT-fs (loop2): bogus number of reserved sectors [ 2032.689808] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2032.735196] audit: type=1804 audit(2000001578.540:4083): pid=20995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/873/file0/bus" dev="ramfs" ino=269161 res=1 03:59:38 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a80)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) r4 = geteuid() stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001c00)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000001d00)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x7, &(0x7f0000001940)=[{&(0x7f00000005c0)="05031148fd92ee3f2d1262575b641d460f51a124e36c0cacc9c585758212151d3c2eb6c35a894747877136d8bcc1ae204f86db0b3a64338c3ae1d6e08acabda0a3daf0a4e0ae39c615c4999c8ff75ca6fd4bdc16f4e46a0b839e784d8eea3cb31597bddcf127b0f27c1f2cb106265f719a26c9313100d902c55306f1ec582253ffa30f7338a2fa93be5eabc74f712ecd5a88b0acbe0f3f387234d4eff5caee3e3b37794af672604bdb45f36b0d042a0338f06f86ca71231ecb076da2656fe31de209f9953138a3", 0xc7, 0x7fff}, {&(0x7f0000000700)="e4b1a86257e474861f6234cf51af268156fc9a0ffb332ba5e3a870909f41f307a98060f7e6419fb181f9aada38f605cc9bc677943606b25686b0fdb346e284aa29dd0ef69d61fbbf37fe088e9b8dd536e6d874e08916b706e14c81832b5cf01737a39b2b7693ea2a03f0ef2b933d6920717ca16a8e7c472a71f3416d00159c7e9ddee221342466ed8448a5ce6f26ce682899086d2260b4c466d3bad1b8f1f5d1dace5f1d859f6cb46081392ed43ac263fd2e4cab3b59b1229ebf271adfc4542dc276510f24a17f2d3f7c4e459edec8474c4cf36c", 0xd4, 0x401}, {&(0x7f0000000140)="2eda21660976628dfe9eeb3a004d4a21f6448375d332ffffa8d891a788f1db99db37b614d19ea209249b67790a9bbaa17f68ffacd426ff5454a30e4e34c2537aa5eeb43145803fe6cc289fb71130d8c951223b426be485c703f8f209df6b703197", 0x61, 0x80}, {&(0x7f00000000c0)="71e4c5d6a04b7f5ce7a28b1d79097459095710075a70cc14a9a34ff1d1137b4fbcca79b70e91041ee596", 0x2a, 0x7f}, {&(0x7f0000000400)="1dfab4cd26b43ba3536f06d62227ab6fe008e467dda282ae26dfb323649300e6a000338d6ddeb9cabeecd92e0c7d89ec483ce3", 0x33, 0x7}, {&(0x7f0000000800)="a6cce7f3259759f5ef835a11e9d93986106ee6ec03759fb1e59d65f808b31a31bd5e6794f2d818de3dfb85c5922862e8501c8cde959451ead19de2f0b924e668893df01a0b67b153718067dea93f0563ffd8aa9de4ad79de33bc2f36592345d64404b85ac625d2eb2cd04dc2885d81e40f938c16432224b71e68e42aebaa9076b2461804e4aa7c3eddf4545a2cb2f2aff6ea22c3fa7682d0df14b55736d7730d60dd179fa9ef40f1494d5340984aee745d7efa796c8bdf590a", 0xb9, 0x1}, {&(0x7f0000000940)="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", 0x1000, 0x400}], 0x404, &(0x7f0000001d40)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x101}}, {@prjquota='prjquota'}, {@noauto_da_alloc='noauto_da_alloc'}], [{@euid_gt={'euid>', r2}}, {@fowner_lt={'fowner<', r3}}, {@uid_eq={'uid', 0x3d, r4}}, {@uid_lt={'uid<', r5}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@hash='hash'}, {@dont_appraise='dont_appraise'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'access=any'}}, {@uid_gt={'uid>', r6}}]}) write$P9_RXATTRCREATE(r1, &(0x7f0000001e80)={0x7, 0x21, 0x2}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) keyctl$set_reqkey_keyring(0xe, 0x7) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="f852b5724580ad3a8b52232c616363657362c6ee2cf96f733d616e792c00"]) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2032.823561] FAT-fs (loop2): bogus number of reserved sectors [ 2032.845313] FAT-fs (loop1): bogus number of reserved sectors [ 2032.851297] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2032.862240] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7b01) [ 2032.895014] audit: type=1804 audit(2000001578.700:4084): pid=20971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/840/file0/bus" dev="sda1" ino=16557 res=1 03:59:38 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000007a000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2032.992602] audit: type=1804 audit(2000001578.710:4085): pid=21005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/873/file0/bus" dev="ramfs" ino=269893 res=1 03:59:38 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x7f04000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x6, &(0x7f0000000000)='logon\x00'}, 0x30) prlimit64(r4, 0x7, &(0x7f0000000180)={0x3ff, 0x2}, 0x0) close(r0) [ 2033.119528] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2033.140786] audit: type=1804 audit(2000001578.720:4086): pid=21001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/840/file0/bus" dev="sda1" ino=16557 res=1 [ 2033.144701] 9pnet: Insufficient options for proto=fd [ 2033.260942] FAT-fs (loop1): bogus number of reserved sectors [ 2033.313617] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2033.349168] 9pnet: Insufficient options for proto=fd 03:59:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x12) [ 2033.365846] audit: type=1804 audit(2000001579.170:4087): pid=21031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/841/file0/bus" dev="ramfs" ino=269302 res=1 [ 2033.400047] FAT-fs (loop2): bogus number of reserved sectors [ 2033.409434] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:39 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000000000007a0000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:39 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x1f01000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2033.505349] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2033.558238] audit: type=1804 audit(2000001579.200:4088): pid=21031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/841/file0/bus" dev="ramfs" ino=269302 res=1 03:59:39 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x4}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2033.614352] FAT-fs (loop2): bogus number of reserved sectors [ 2033.651426] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:39 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xf05000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:39 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000007000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2033.713782] FAT-fs (loop3): bogus number of reserved sectors [ 2033.725718] FAT-fs (loop3): Can't find a valid FAT filesystem 03:59:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x600}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x49) [ 2033.871913] FAT-fs (loop1): bogus number of reserved sectors [ 2033.908864] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:39 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 03:59:39 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0900bd1e6f0100000100e897ea20d64838223a4bd3a4ca3386762733"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:39 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000074000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2034.040884] FAT-fs (loop1): Unrecognized mount option "3" or missing value [ 2034.125281] FAT-fs (loop2): bogus number of reserved sectors [ 2034.158531] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:40 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x3704, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:40 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400404, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) r3 = getgid() syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xf3, 0x7, &(0x7f0000001940)=[{&(0x7f00000005c0)="1283853ec1a2eef60c202701676159087362f0f4acc9bc4a7173fdcc7009b90b692f13ef5045856e15b017f38ed19cd6d7be066a93c930a22bdab52809d6df6dde6b83ca2d601cec2b7742dc02e4360466f98f56e22395985c0508e949f6787ca4a9a0846f3d3272387617d9c0f2b1d2cbc31b2f321cbac0c798d8cd99dc560e697aa85e766632314b616c0e1977c6431be269da725d29a941f458108a2c24f1b5889fdfabf3f84c3eddac", 0xab, 0x80000}, {&(0x7f0000000940)="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", 0x1000, 0x7}, {&(0x7f0000000180)="e94425ee55eb4108fe0687858bd93a63b2057021b0e91c3339748c", 0x1b}, {&(0x7f0000000700)="b465e78fe21c5c339450033a6c1f5084bc05a3de6eb0654839371770efa7f43c8cfac7042b2ae8aaaabb3a97ad8d45cc6d1d5fe4a67437015da1f62c2e0690e4631b19ae233a51ae9c1b17c0127718e362faacd18dbefc3330fc565da1aec395969da3c02c257542b6f4ff58ab8c09e7a4fbc87a4e4de9f839c994f179cd0f3397270bebfb33857d8dc1a1d98a419a04e0eb0346cda44e0560cf4abb85cd7b95ea72f0438fa81e9db5c46dd8c0d79d2559dc555eb23375a7f7253741b3d960b2774f93f8effdf01ffec590bd501986bf5ae2b9df5c8ae9575b51fde96923ef5129b65a6d527d44f22218277e51e4b0ed1c99aec660dc81", 0xf7, 0x2}, {&(0x7f0000000800)="ee36fadb3d5e51ce7299034effc1da40e5a6a76df488c6249998dc5aa42e8ce4ccc38c894ad6e1005d5910da52f94be9ed1717d6e71f09fbb75a0720bc3103a9865b92327a2ebea9aa0f6bea5f1a96a21eea151e72f83ef2ac24d2997886ca41b1fd7ce648a4776904f8f2ee900f3f5aa15009aa515b46e51cb6d0ba0ea0ee4b1e617efee1f6d8accff17bc7738f1b748f3f32ef946707f90eeeea828b8558f6a8939ccb6f404970c6e59e00e101467003d339e15b721953c45185bd71eb7edb86a401dde2d328e381f2fef6c5f440b51179fc28dc9a439581a38e6917152d325d0eea24b343b69d97", 0xe9, 0x4}, {&(0x7f0000000400)="45fa9b75d4276d01d926a5b9703638fddff15c4e0bcb3255bb2222bdeee4417036c4dce84764e7220c9dc5fe304f031a7abea247a6bb3a130201e8ede021e1a89a83fde616f94729f9fa31d5f5da14352d12056dc2282708023edf92faf794b5aff67c431b9762f81d362852caa650e89ad350", 0x73, 0x6}, {&(0x7f00000004c0)="75d6d3e4a61bc56e0220c5b654dcb23d2f095e80b733972d4bd0af7d852f8fc7710b51bc2d33178b7fdde2886b0fae2c9372f4a296ab58f25a4c9db7a158a8aa", 0x40, 0x7}], 0x0, &(0x7f0000001a00)={[{@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@umask={'umask', 0x3d, 0x9}}, {@fat=@gid={'gid', 0x3d, r3}}, {@dots='dots'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_measure='dont_measure'}]}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000001a80)=ANY=[@ANYBLOB="09000000a4a00813d880e705a3f7cf7b0b0f7709082f6c8cb964d08b9f8feb1391310dd52239ceb2adbefea8fdb2475affa1bda122ae146fe13762d7410b6356bb806989dad4a05c270346236b5d53e5d64a44d1fac4"], 0x9) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000001b00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) unshare(0x20000400) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:40 executing program 3: 03:59:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x491) 03:59:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000100)=0x1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000006000004010000002b01000000000000"]) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000340)={0x100000000, 0x100000000, 0x3, 'queue1\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:40 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000004c000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2034.450003] FAT-fs (loop1): bogus number of reserved sectors [ 2034.489500] FAT-fs (loop0): Unrecognized mount option "mask=MAY_WRITE" or missing value 03:59:40 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)={@local={0xfe, 0x80, [0xfeff]}, @empty, @loopback}) semget(0xffffffffffffffff, 0x0, 0x0) semtimedop(0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) getuid() ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)=ANY=[]) eventfd2(0x0, 0x0) [ 2034.494716] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2034.644122] FAT-fs (loop2): bogus number of reserved sectors [ 2034.673274] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:40 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000007fffffff000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:40 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x3, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap='mmap'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000532000)=0x19) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="baf80c66b89c3bcb8666efbafc0c66ed0fae6400260f22d20fba6e43310ffc4f040f92373e0fc76a00baf80c66b808dab98f66efbafc0c66ed0fbaed100f32", 0x3f}], 0xaaaaaaaaaaaab0c, 0x0, &(0x7f0000000000), 0x0) 03:59:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8030000) [ 2034.716016] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2034.877026] FAT-fs (loop2): bogus number of reserved sectors 03:59:40 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xb708, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2034.926516] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:40 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000009000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:40 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5a990c9, 0x8000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2035.104246] FAT-fs (loop1): bogus number of reserved sectors 03:59:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x91040000) 03:59:41 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000680000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2035.147104] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000500)='./control\x00', &(0x7f0000000540)=@random={'user.', "29b3766d6e6574317b706f7369785f61636c5f6163636573732d5c706f7369785f61636c5f6163636573732d00"}) [ 2035.236219] FAT-fs (loop2): bogus number of reserved sectors [ 2035.276279] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2035.293715] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:41 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x400000000000}, 0x7) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x711c01, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@v2={0x3, 0x3, 0x0, 0xffffffffffffffe1, 0x66, "033e96e571059cdd515a0e44c238e96db54466355424036897e9402881c12fddef0357822f2203b3508e1b97346f1bd2dcb8fd91f0b49b98ff5bd20a692eb4f1aeea42f7b17d517f7adc4111c8ffd3b794dd244c5dfe0f0c947a2317b085d5a1809afca80c4e"}, 0x70, 0x0) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2035.412271] FAT-fs (loop2): bogus number of reserved sectors 03:59:41 executing program 3: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)=""/56, &(0x7f00000000c0)=0x38) r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x70e000) 03:59:41 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x4800000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:41 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000006000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2035.492660] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:41 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc100) 03:59:41 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') dup3(r2, r0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r4, 0x0, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) [ 2035.621085] FAT-fs (loop1): bogus number of reserved sectors [ 2035.676033] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:41 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77b0eb6c6f3d", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000440)={0x2a, 0x29, 0x1, {0x800000}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = dup3(r1, r1, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x3) write$P9_RWALK(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="570000006f010009020402000000060000000000000020000000000500000000000000800200000007000000000000000004000003000000000000000040030000000300000000000000"], 0xe8) mkdir(&(0x7f0000000800)='./file0\x00', 0x20) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) finit_module(r0, &(0x7f0000000400)='9p\x00', 0x1) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@version_L='version=9p2000.L'}, {@afid={'afid', 0x3d, 0x10000}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@dont_measure='dont_measure'}, {@hash='hash'}, {@fsname={'fsname', 0x3d, 'trans=fd,'}}, {@appraise_type='appraise_type=imasig'}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) r4 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={0x0, 0x7}, &(0x7f00000004c0)=0x8) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000007c0)={r6, 0x8}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000680)={0x5, 0x8008, 0x6, 0x1, r5}, &(0x7f0000000700)=0x10) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:41 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000005000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2035.813643] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2035.844091] FAT-fs (loop2): bogus number of reserved sectors [ 2035.856477] 9pnet: Insufficient options for proto=fd [ 2035.890286] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2035.903111] 9pnet: p9_fd_create_tcp (21310): problem connecting socket to 127.0.0.1 03:59:41 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x1000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2035.976020] 9pnet: Insufficient options for proto=fd 03:59:41 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x3, 0x6d, &(0x7f0000000340)="0dd1166bac8a93ab24e4f9ccc9ddffcc48a6697e84f82e73ab03fa672ca6caf90a0bacd326605fefdd03620df4a913fbe1aaf736cf6ef7a63673e2264d21f6b6047cd00f68225864859b27872b0d0a4faa93f4bb32977478bda0cb54d6540be42b20685ca49fd0eb3cab52c20a"}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) shutdown(r0, 0x1) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2036.013414] 9pnet: p9_fd_create_tcp (21323): problem connecting socket to 127.0.0.1 03:59:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3a) 03:59:41 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000040000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2036.141753] FAT-fs (loop1): bogus number of reserved sectors 03:59:42 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) r4 = getgid() fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r4, 0x1c00) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2036.187441] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2036.202325] FAT-fs (loop2): bogus number of reserved sectors [ 2036.229788] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') dup3(r2, r0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r4, 0x0, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 03:59:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000001000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2036.360028] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="000000000000ff00000000c5080000000000"]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb700004000000000) 03:59:42 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000080)=""/42) 03:59:42 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x59f, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000003f0000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3b000000) 03:59:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') dup3(r2, r0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r4, 0x0, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) [ 2036.686059] FAT-fs (loop2): bogus number of reserved sectors [ 2036.722892] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2036.763121] FAT-fs (loop1): bogus number of reserved sectors 03:59:42 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='ans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000005000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2036.844762] FAT-fs (loop2): bogus number of reserved sectors [ 2036.869862] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2036.904857] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2036.970210] FAT-fs (loop1): Unrecognized mount option "2" or missing value 03:59:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0xfffffffffffffffe, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={[], 0x1c5, 0x4, 0x100, 0xf3a5, 0x1b020000, r3}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000014000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) [ 2037.056256] kauditd_printk_skb: 33 callbacks suppressed [ 2037.056271] audit: type=1804 audit(2000001582.850:4122): pid=21398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/847/file0/file0/bus" dev="ramfs" ino=271237 res=1 03:59:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000003000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:43 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xf000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:43 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "1ac3e8a6385f2fea2c8f8a24079087e2912c8409849a613eb44ee10d7bafa143517798bb9281791b84b462218aaa2d2482df581f9cc05397e419d669b7839187e79646e20832abae2ab2ba19bac5c3a5483d819398e22f2504ab2ef59f8f73654ebbcef2186b3f4a34e76f35770bbf460a81e68cb2d218bbf39a478a8ea6"}, 0x80) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2037.195599] audit: type=1804 audit(2000001582.890:4123): pid=21441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/847/file0/file0/bus" dev="ramfs" ino=271237 res=1 [ 2037.232235] FAT-fs (loop2): bogus number of reserved sectors [ 2037.254092] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2037.310673] audit: type=1804 audit(2000001583.070:4124): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/881/file0/bus" dev="ramfs" ino=271308 res=1 [ 2037.390621] FAT-fs (loop2): bogus number of reserved sectors 03:59:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb0000040) 03:59:43 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000000000006c0000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:43 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="840000006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2037.418201] audit: type=1804 audit(2000001583.220:4125): pid=21474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/881/file0/bus" dev="ramfs" ino=271308 res=1 [ 2037.425526] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2037.453509] FAT-fs (loop1): bogus number of reserved sectors [ 2037.475731] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:43 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') dup3(r2, r0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r4, 0x0, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) [ 2037.578420] audit: type=1804 audit(2000001583.320:4126): pid=21481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/848/file0/bus" dev="ramfs" ino=271326 res=1 [ 2037.614435] 9pnet: Insufficient options for proto=fd 03:59:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xb0, &(0x7f0000000340)=[@in6={0xa, 0x80, 0x9, @mcast2, 0x80000001}, @in6={0xa, 0x4e22, 0xffff, @mcast1, 0x94}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x80000000, @remote, 0x400}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x20}, 0x1}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000780)={r4, @in6={{0xa, 0x4e24, 0x1, @local, 0x5}}, 0x101, 0x5, 0x1, 0x4000000000000000, 0x862a}, &(0x7f0000000180)=0x98) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fstat(r5, &(0x7f0000000840)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000280)='security.evm\x00', &(0x7f0000000400)=@sha1={0x1, "5da43d182926bf45eedf29b3def6a2d94e235ed7"}, 0x15, 0x3) timer_delete(r6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2037.666474] 9pnet: Insufficient options for proto=fd [ 2037.708797] audit: type=1804 audit(2000001583.340:4127): pid=21481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/848/file0/bus" dev="ramfs" ino=271326 res=1 [ 2037.753917] FAT-fs (loop1): Unrecognized mount option "1" or missing value 03:59:43 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0xffffffffffffffe8}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000007eba22b4888300000000000000000026fcbf3a83316c442bd320d030"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file1\x00', 0xffffffff00000001, 0x4, &(0x7f0000000700)=[{&(0x7f0000000140)="734d5016b5bbca5d25cb89209e6331ea2ef3a4dcdd4ab2829d32576a430ba306c443dca77a163c69dc5960666127cef4d7b56310135ddc98bd22d7c364f39797277d51bb2977f34ed68f764b0e8ff1f4785e165c029439ff02ad", 0x5a}, {&(0x7f00000000c0)="1a88fd58bea0aa6edd74d1abcb1394bfb471cefaf9a940", 0x17, 0x80}, {&(0x7f00000005c0)="049beaed198407f8f0d9fe9316b3bf9203c2d8959c8ae411befc6ee5f9f8c7e8657ba8e78d316cbdc836e1189ebf5c977096adf3bec68b6bc7f585bbc817bb9cc2751bc15f515fb96a97d1d37c708e3496a794aa500f23ab11d6de4b2f98a803eade73fb6016909da5467517bc55d94676112f3916f09c5bdc590f0795acae10903dd4c0cc9771bf8b5adcab813343fb0a1257502e41d5a7ff27648d124c59a0de1f3cefe60cf3336ed78887f8bd715373", 0xb1, 0x4}, {&(0x7f0000000400)="cdc7def1cab4df712f424c8a68d6fa14ea421987f1a77f1a0f08d02b38c6a4f55a5a8f9fd98f28fdd5f2ed68f585b4416a9ea1e391e4f38fb4cf", 0x3a, 0x10001}], 0x1004802, &(0x7f0000000440)='access=any') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2037.828741] audit: type=1804 audit(2000001583.350:4128): pid=21476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/881/file0/bus" dev="ramfs" ino=271308 res=1 03:59:43 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000050000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2037.868710] audit: type=1804 audit(2000001583.590:4129): pid=21475 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/848/file0/file0/bus" dev="ramfs" ino=271352 res=1 03:59:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x86010000) 03:59:43 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xcf02000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2037.916239] audit: type=1804 audit(2000001583.620:4130): pid=21509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/848/file0/file0/bus" dev="ramfs" ino=271352 res=1 [ 2037.968428] FAT-fs (loop2): bogus number of reserved sectors [ 2038.015213] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2038.052505] audit: type=1804 audit(2000001583.830:4131): pid=21526 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir243640134/syzkaller.T1Gdhy/882/file0/bus" dev="ramfs" ino=272209 res=1 03:59:43 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000030000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2038.175811] FAT-fs (loop1): bogus number of reserved sectors 03:59:44 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) [ 2038.219073] FAT-fs (loop2): Unrecognized mount option " [ 2038.219073] " or missing value [ 2038.222381] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:44 executing program 2: socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000840)={{0x5, 0x6, 0x9, 0x8, 'syz0\x00', 0x3}, 0x2, 0x20000000, 0x7fbb00d5, 0x0, 0x5, 0x0, 'syz1\x00', &(0x7f0000000680)=['em0vboxnet1[md5sumvboxnet1system\x00', '\x00', 'keyringGPLuserselinux*,ppp1\x00', '\x00', ']mime_type[vboxnet1ppp0#)\x00'], 0x59, [], [0x9]}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha224-ssse3,ctr-camellia-asm)\x00'}, 0x58) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r4, 0x304, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000028c0)="b7da122b", 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@rand_addr}, 0x8) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r5, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x77359400}, 0x0, 0x1}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x74b, @dev={0xfe, 0x80, [], 0xe}, 0x8e}}, 0x20, 0x7e5, 0xb0b, 0xf82, 0x9467}, &(0x7f0000000840)=0x98) 03:59:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') dup3(r2, r0, 0x0) 03:59:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd0040000) 03:59:44 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000200000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2038.440091] FAT-fs (loop1): Unrecognized mount option "3" or missing value 03:59:44 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8, 0x2282) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa00, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000004c0)) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="890097093237d70100e7fe26e3874ea8c36b808ccc28dc1f010900f4fdbb38d9dd70f1f1347348eacb682a6a3f8a63744c568e8bd4c08009cb0b98b736da37a6ce40f3e8cfcbd32d510350c469aee200fc3027a864ccb46e0b317d008a090000000000000000000000000000000000000000000000"], 0x9) prctl$getname(0x10, &(0x7f0000000380)=""/79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="74010000803d66642c7266646e6f3dde3e3b6a4e5e25f65edd4c27000c5f54e9042217ea854d29a4771a3a54dd48a05df19096e7bc71f1523a9437dd73b8cfa569bd0a4f6a9c93b050b940060d2af805704dcfcabb8650fe72156c9666b0", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:44 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x67010000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2038.636145] FAT-fs (loop2): bogus number of reserved sectors [ 2038.663732] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:44 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000003f000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:44 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000005c0)="2304d4024a8bce8a9c4658332607b00d368d21f5bd9094b86b81d81fa8e956b665d83c8b70e8d4fb70bcfe8a8295de1a321599b4d0c8b7ab96cb140375284a36cc06e875540c2586bfedff2c134017d2498348c1d3fcd543bf26a9e0586a3e75edb29f87adbc98b7043fc14f0535238d9f0b76d14c10ab7e6853f0f6f7b77d5dbcc63ff38ad4539f55fe10c679c623a967431d942939cd1744560ab470f4880fc1fb088c1069a440328a2b75bb7c39dbc630f16d071a567bd2fa1087ad2004afc2c26b45fe92020d96c527", 0xcb}, {&(0x7f00000000c0)="b49ec70a6eb8296dfe6fff02c569b301d5d1853db4e3198ff5e97744cf182b5733a38a97b7ba6c2eba575d3cac59cc212506d6a968b1cc90a5", 0x39}, {&(0x7f0000000940)="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", 0x1000}], 0x3, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200, 0x0) accept$alg(r2, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0xfffffffffffffffe, {0x0, [{{0x0, 0x0, 0x2000000000}, 0x0, 0x20000000000, 0xfffffdab, './file0'}]}}, 0xffffffffffffff82) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2038.832310] FAT-fs (loop1): bogus number of reserved sectors 03:59:44 executing program 3: syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r0+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') [ 2038.895880] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2038.949124] FAT-fs (loop2): bogus number of reserved sectors 03:59:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8b) 03:59:44 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000004c0000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:44 executing program 0: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000080)='(%-\x00', 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x3, r1}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2039.044205] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2039.144974] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)) ioctl$BLKRRPART(r1, 0x125f, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x3e, 0x2, @thr={&(0x7f0000000340)="7970464989a8cab169e5a2bb8c3037d8e428021722b59e5a3806dd74eb585c950847ae936fd17f1f9f4b95d1ae83efe9d81993267824568264775d2a91d3215fb831a1b50cec8f6ce57360bc2e77ea84ffdd9a0ea753a46e6e6df927210631e115ff6627802d90d5020a3e46e1d87a8d485c1f71c5653e396fb93c7e226177145a8686f595a1330dcd7a6ab6ada54386bb110c55", &(0x7f0000000280)}}, &(0x7f0000000200)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2039.199085] 9pnet: Insufficient options for proto=fd 03:59:45 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xf05, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66642c7266646e20e6", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2039.238949] 9pnet: Insufficient options for proto=fd [ 2039.257408] 9pnet: Insufficient options for proto=fd [ 2039.272618] 9pnet: Insufficient options for proto=fd 03:59:45 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000006c000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4900000000000000) [ 2039.371793] FAT-fs (loop2): bogus number of reserved sectors [ 2039.395693] 9pnet: Insufficient options for proto=fd [ 2039.408906] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2039.420629] FAT-fs (loop1): bogus number of reserved sectors [ 2039.445167] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2039.462613] 9pnet: Insufficient options for proto=fd 03:59:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='task\x00') statx(r2, &(0x7f0000000080)='./file0\x00', 0x800, 0x0, &(0x7f00000005c0)) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2039.540081] FAT-fs (loop2): Unrecognized mount option "ypFI‰¨Ê±i墻Œ07Øä("µžZ8ÝtëX\•G®“oÑŸK•Ñ®ƒïéØ“&x$V‚dw]*‘Ó!_¸1¡µ ìlås`¼.wê„ÿÝš§S¤nnmù'!1áÿf'€-Õ [ 2039.540081] >FáØzH\qÅe>9o¹<~"awZ††õ•¡3 Ízj¶­¥C†» U" or missing value [ 2039.615385] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:45 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000400300000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x400101c000000000) 03:59:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:45 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x3f0b000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:45 executing program 0: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xffffffffffffffde) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x2}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000005c0)={0x0, 0xfb, 0xc0, 0x1, 0x100000000, "d5ad562342f1d60aabdef6bd278b5f08", "715af1de45e42c774f9bd3de4c13b310c1560dcd2b5fd65ed1d908834b903e8dca50d5a1d4bb34b1e78db781abba0d740e53e81a326450712b0ac4dd1a8158556dc3eb08e90a88fbbfee815d3d3153573a7f1508b5b60470b0c9f076e2018bec33e5358539e176f5e14a1dfc5257def63d1be6c3e86c70b43ea98b640a286e7752e62ae8318f8172cb9754a8ad49efe77ca6b7426ab469f065f88fc717cf201595e7193a849d036d79678c"}, 0xc0, 0x3) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2039.933422] FAT-fs (loop2): bogus number of reserved sectors [ 2039.956453] FAT-fs (loop1): bogus number of reserved sectors 03:59:45 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000006c0000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2039.981226] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2039.991199] 9pnet: Insufficient options for proto=fd 03:59:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xfe00000000000000) [ 2040.038707] 9pnet: Insufficient options for proto=fd [ 2040.044677] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2040.075412] 9pnet: Insufficient options for proto=fd [ 2040.087687] 9pnet: Insufficient options for proto=fd 03:59:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = shmget$private(0x0, 0x3000, 0x54000402, &(0x7f0000ffa000/0x3000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000700)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) r6 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000800)={{0x4, r3, r4, r5, r6, 0x102, 0x9}, 0x4e2, 0x7, 0x3, 0x80, r7, r8, 0x9}) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000340)="513284089ce343b8e63521f5bdebb58e84694738322d948f6577fa4636f91756174f4ada25ec33b04ce8257b5a004b1d492624366040a8ee46f741218c9755d757234786c0dc3a7b7245d78444966bc97b84fab2ac56abd6569fcadd189a75adb2f811b8435ecd253c78982a19c7e4855f9ff8c609a1601c2cafa621d3d4f34401226b4c2f4655c22765cc4087decfad0bf3a2906dd3ee53f4afa57b08d8edc5812d37c7be", 0xa5}, {&(0x7f0000000100)="d9a1f29c5477fabdf94b9063ea24a67214eea22e81729492d8440c74ad1c0495096a95063d09fd6e", 0x28}, {&(0x7f0000000780)="bc12aa9258236cb322997ad9e0313cc7e7feb017143bcdfd6cce7efbc2890a5f3e51dac12206e1fee07b9a789e6ff42fd0b3033c28519451341fdf95a85b1dd83903919ef7e0dfcc42e1fb4c2cd8f3f04f849560acb70c6710ad88c1d812a5b6a7dd2bb6f7e2264058d75d01a2ef7daf54291365d59bd7e456080834a965bce5dda61aea1591821f3fc9f99dd085616fc8c537e6739bdd112771d12eef1df8429a600d0f370ade33255b51a0c8ad62b71a7ba8fc992309239279306afc8cb0b6da1daf66f50dbc367ac377c7a7c69e1a1ab4c4", 0xd3}, {&(0x7f0000000880)="52da364f2938a6f623e343b34d0dd29c395e20143efbf99a935a37b78f9314e00d16c435b254aa913f6c8ca13ef2079f47b076deb89645ca2499982251e302125febd683118f3466b7325c8931bee58fa684aa111104b7d3955fb05e2b97982e941aa1612a470afc221031bf8613020e21b3f789920a275ddf6064cca27a6aec6a431100c5d5b029377d6421cd4bd9565701f2a6db7606df80423c86e2fc3056b40b847f8982633a88b964e2c104a22c6e261658cfad85dbe9c481c0ead3d04bb378dc2a7f87213acc99", 0xca}, {&(0x7f0000000180)}, {&(0x7f0000000980)="962347218928463e67d2688794be5b1f305a8e25a76ee9efd198185b24974390642ab02ace07c11fd33677b6582ad83ae4417a112f41432cc051c771609aabf39530f2d0c4d6ea9f07db26a28173494a346478e8f9c35b99935964d918abbfc3872ee99828f755cdfd8c9bd3f701196c6b873854ad65a1396cb4076c11a4d8b2b7dbf3ae71d610629d7ff0fd755a97868142d8220bcefd0263f94ad5049dab87d1c29b13f6bd204f0996bd4dc31b1c6da327f10087000f4f319c730e5ffb9dd7a08ddd8bdaa606ecf11f7b1539e287a654c3cf70a29dff113ebe9317470503125595861ef828f15769596c", 0xeb}, {&(0x7f0000000a80)="56377ea246f5ee7709a3b323c8135fe1b3b018f55ad877ab60152b1c1e3757057f5753a6d1d0e2613aecf50fb0933d8ba082608832eb27495d679f26c22cc0fa321a74bb33b85f776d7d05b0dd92a16ebc5b59240b74ae00c7a59b8916ff57d3368904bca2c3ffb4f4e2e1a23c33b1b87e287e59bfc988c271bd51aed40cd5b1cec9e719a71a0324830583d7a94a3aec0ed5a3e64bb01c552c3f548768cbc2646f2b8cee2a1ce618cd3445e1323e0a47f6d1e4a257171d0569905d9bb0d968197eb99d95f74e67a04e5fbb9638fc40cbbb641e1a06aa97cdcb34e9cabec4f2610efdc37610ee1a0f0c", 0xe9}, {&(0x7f0000000b80)="a8add31e712d2bffd4e17559719571ef1dbeaee033972df6f6b166022513679a18f27b21f878eb752cd90015d4e80418f06b8dcace1ef429f620ae27d59792903eeb83305cd659454dad46e941ba", 0x4e}], 0x8) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2040.186979] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:46 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000090000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2c000000) 03:59:46 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x37040000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:46 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040), 0x84800) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2040.387958] FAT-fs (loop2): bogus number of reserved sectors [ 2040.422420] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2040.509464] FAT-fs (loop1): bogus number of reserved sectors [ 2040.549793] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:46 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:46 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000006c000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000340)=""/191) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6, 0x40000) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="b3959c444700e452560000260000bd000000000100000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) 03:59:46 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x74010000) [ 2040.708935] FAT-fs (loop1): Unrecognized mount option "2" or missing value 03:59:46 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000fffffffb000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:46 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xaf0a0000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2040.864273] FAT-fs (loop2): bogus number of reserved sectors [ 2040.870139] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x185) 03:59:46 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000ffffffff0000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2041.010499] FAT-fs (loop2): bogus number of reserved sectors [ 2041.022628] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0xcb, "13c5d9b62582c42b72aa3d0f4b1d076ba4f36f0321e0af735cd48ebbc4215c5a67045ac80aed6e87512eaa25e8dc0e988f9ba0dd76b3d90f650585772650672ba26eabd1b4d1c6b514c6b60ea577cd0ad7b09929b6ef4a45fa8079c249dd98938137ea140300e45fe1ed3f8c6c286e879ba542878101796f88067a0b9ad1a91922d1652e0fc6355ce666b05d75d87546fb12737e1dc08d2632e76b65dd675b928f3736b5f7a6b095d951681995caf3d533b6ee2750a2ed8f424908198c2f70326e80172192a77bb8051e76"}, &(0x7f0000000000)=0xd3) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x1000000000000000, 0x4, 0x0, 0xfffffffffffffff7, r4}, 0x10) [ 2041.138427] FAT-fs (loop1): bogus number of reserved sectors [ 2041.176704] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4b564d01) 03:59:47 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000020000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2041.321956] FAT-fs (loop2): bogus number of reserved sectors [ 2041.330855] FAT-fs (loop1): bogus number of reserved sectors [ 2041.354786] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2041.372979] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:47 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:47 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xf050000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7a01000000000000) [ 2041.594183] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! 03:59:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:47 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000007fffffff0000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)="72616d669100", 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000680)={0x0, {}, {0x2, 0x4e20}, {}, 0x112, 0x81, 0x10001, 0xbb, 0x1ff, &(0x7f0000000640)='dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='vfat\x00', r2}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a794", &(0x7f00000003c0)}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) timer_delete(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) close(r0) [ 2041.645646] FAT-fs (loop1): bogus number of reserved sectors [ 2041.651749] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2041.769437] FAT-fs (loop2): bogus number of reserved sectors 03:59:47 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000070000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2041.814363] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2041.842920] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000140)=""/51, 0x123d000, 0x1800, 0xffffffffffffff23}, 0x18) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0x100000001) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b0001c000000000) [ 2041.970300] FAT-fs (loop2): bogus number of reserved sectors 03:59:47 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:47 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x8f09, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2042.033358] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000001000000000000050000b9b5000000000000000000000000ea6f78188ae2273e288f6d128a9a72d89a5e5c9b7ba683b5"]) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0xfffffffffffffe43}}, {{&(0x7f00000006c0)=@rc, 0x1f, &(0x7f0000000540), 0xa0, &(0x7f0000000040)=""/206, 0xce}}], 0x36e, 0x203f, 0x0) 03:59:47 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000004000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020bc00f1b00000025bd7000fcdbdf2508001900000000000a004e23ffffffffff0200000000000000000000000000016d0000000a004e2080000000fe80000000000000000000000000001b9b0200000000000000fe8000000000000000000000000000aa02001010030017003220000002004e247f0000010000000000000000050019000000000002004e22ac1414aa000000000000000002004e2300000004000000000000000004000700faffffffff000000000000000600000000000000e100000000000000"], 0xd8}}, 0x4008000) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2042.214183] FAT-fs (loop1): bogus number of reserved sectors [ 2042.220047] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 2042.276880] kauditd_printk_skb: 31 callbacks suppressed [ 2042.276894] audit: type=1804 audit(2000001588.080:4163): pid=21958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/856/file0/bus" dev="ramfs" ino=274433 res=1 03:59:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x830000c000000000) 03:59:48 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000007a000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:48 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000040)=@nl, 0x80, &(0x7f00000000c0)=[{&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f0000000140)=""/84, 0x54}, {&(0x7f00000007c0)=""/132, 0x84}], 0x4, &(0x7f0000000940)=""/4096, 0x1000, 0x43a6}, 0x20) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x105000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000004c0)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2042.382781] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2042.443665] audit: type=1804 audit(2000001588.080:4164): pid=21958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/856/file0/bus" dev="ramfs" ino=274433 res=1 03:59:48 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x5705, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2042.556436] audit: type=1804 audit(2000001588.230:4165): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/856/file0/file0/bus" dev="ramfs" ino=274453 res=1 [ 2042.639202] audit: type=1804 audit(2000001588.230:4166): pid=21987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/856/file0/file0/bus" dev="ramfs" ino=274453 res=1 03:59:48 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000030000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2042.698807] FAT-fs (loop1): bogus number of reserved sectors [ 2042.737211] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2042.765209] audit: type=1804 audit(2000001588.570:4167): pid=22009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/857/file0/bus" dev="ramfs" ino=274551 res=1 03:59:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff00000000) [ 2042.808395] audit: type=1804 audit(2000001588.570:4168): pid=22009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/857/file0/bus" dev="ramfs" ino=274551 res=1 [ 2042.902928] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:48 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(0xffffffffffffffff, r0, 0x0) 03:59:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 2042.938971] audit: type=1804 audit(2000001588.740:4169): pid=22028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/857/file0/file0/bus" dev="ramfs" ino=275552 res=1 03:59:48 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000007a0000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2043.017823] audit: type=1804 audit(2000001588.790:4170): pid=22013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/857/file0/bus" dev="ramfs" ino=274551 res=1 03:59:48 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x48000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x79010000) 03:59:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000004c000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2043.234691] FAT-fs (loop1): bogus number of reserved sectors [ 2043.276579] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2043.278624] audit: type=1804 audit(2000001589.080:4171): pid=22051 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/858/file0/bus" dev="ramfs" ino=275619 res=1 03:59:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 2043.373422] audit: type=1804 audit(2000001589.110:4172): pid=22051 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/858/file0/bus" dev="ramfs" ino=275619 res=1 [ 2043.428915] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000010000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:49 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000180)={0xffffffffffffff8b}, 0xffffffffffffffdd) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.stat\x00', 0x0, 0x0) r3 = geteuid() r4 = getgid() stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000400)='fuse\x00', 0x220403, &(0x7f0000000640)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@smackfsdef={'smackfsdef', 0x3d, '\\'}}, {@uid_gt={'uid>', r5}}]}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65309bc605c24dbcbdb2450d56a15fda82a577bc0ffea0591c38ea90e1abc6f7074aa176e37972b3def8ec65aa8383f0cc4162c4857718d4a874a3244bbe82b688afa1b6fa029db46a0b87172648fd865f433cb97d20166363671abb3557ec4a7a47993972"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x82) 03:59:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b000000) 03:59:49 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x170c, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000048000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2043.740972] FAT-fs (loop1): bogus number of reserved sectors [ 2043.754208] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r1, r0, 0x0) 03:59:49 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) write$binfmt_elf64(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0x8, 0x8, 0x80, 0x2, 0x3e, 0x4, 0x16b, 0x40, 0x2d8, 0x8, 0x80000001, 0x38, 0x1, 0x1, 0x9, 0x10001}, [{0x7, 0x8, 0xe000000000, 0x5e, 0x0, 0x1, 0x7fffffff, 0xe4d}], "", [[], [], [], [], [], [], [], [], [], []]}, 0xa78) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8010040) 03:59:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 2043.861392] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000fffffffb0000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:49 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xbf06, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r1, r0, 0x0) 03:59:49 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x8) 03:59:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000480000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:50 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r1, r0, 0x0) [ 2044.226499] FAT-fs (loop1): bogus number of reserved sectors [ 2044.274560] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:50 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r0+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r1, 0xffffffffffffffff, 0x0) 03:59:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb0201c0) 03:59:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:50 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:50 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000fdffffff000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2044.486003] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:50 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000004000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x40000108) 03:59:50 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2a0000002901000000000045ed2616c479b403d6e3300000000013aa9815aa9f411e84fb1c662b2700000000e5ffff"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:50 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xff08000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:50 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000002000000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:50 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r0+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r1, 0xffffffffffffffff, 0x0) 03:59:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8004000000000000) [ 2045.011472] FAT-fs (loop1): bogus number of reserved sectors [ 2045.031377] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:50 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000740000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getuid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:50 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) [ 2045.276897] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:51 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000060000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3a00000000000000) 03:59:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:51 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x17030000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:51 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000001, 0x80) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x12}) 03:59:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) [ 2045.532413] FAT-fs (loop1): bogus number of reserved sectors [ 2045.568753] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2045.673018] FAT-fs (loop1): Unrecognized mount option "1" or missing value 03:59:51 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r0+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r1, 0xffffffffffffffff, 0x0) 03:59:51 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000080ffffff000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:51 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="090000046f01000000bfe4009169aa0ad7e8"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x12000000) 03:59:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:51 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x23f, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:51 executing program 0: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$inet(0x2, 0x7, 0x10001, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r0, r1, 0x80000) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="748968f11b2c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r3, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r3, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000080)}, 0x0) 03:59:51 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000040000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000080)}, 0x0) 03:59:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xce) 03:59:51 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) r2 = shmget(0x2, 0x3000, 0x1e0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2046.132849] FAT-fs (loop1): bogus number of reserved sectors [ 2046.175214] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2046.282139] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:52 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000080)}, 0x0) 03:59:52 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000500000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40000, 0x0) connect$netlink(r2, &(0x7f0000000180)=@unspec, 0xc) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x187) 03:59:52 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x8f000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 2046.662977] FAT-fs (loop1): bogus number of reserved sectors [ 2046.701672] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:52 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000050000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0xfffffffffffffffd}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x3f76df62, @local, 0x2}}, 0x1, 0x4, 0x8, 0x2a4b, 0x20}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)={r4, 0x3, 0x4, [0x239b, 0xc2d, 0x6, 0xffffffff]}, &(0x7f00000004c0)=0x10) syz_open_procfs(r2, &(0x7f0000000040)='net/snmp6\x00') 03:59:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c000000000) [ 2046.853264] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1, 0xffffffffffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 03:59:52 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000000400000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:52 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f0000000040)='./file0\x00', 0xffffff8c) 03:59:52 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xd700, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:52 executing program 2: semget(0x1, 0x0, 0x382) 03:59:52 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000ffffff800000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xde01) 03:59:53 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40000, 0x0) connect$netlink(r2, &(0x7f0000000180)=@unspec, 0xc) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2047.302560] FAT-fs (loop1): bogus number of reserved sectors [ 2047.341001] kauditd_printk_skb: 20 callbacks suppressed [ 2047.341016] audit: type=1804 audit(2000001593.140:4193): pid=22449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/865/file0/bus" dev="ramfs" ino=277520 res=1 03:59:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:53 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302e752c00d0c2713e1a4245fc75e5f10fb34d09470546553856070000000fdaf7162ad5b8fb91de885d075ed576fb42141b4a1cc466e17e12e631737957ba00b870250f3124ae0f7a2690ba8e4cbdd7e4ea380b1bd502743531e637c25226c858fa0b386a685aec3df9083d28b77a2f08a2beef24c9737ab2dcab8dd111"]) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff90) [ 2047.421343] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:53 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000060000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2047.460139] audit: type=1804 audit(2000001593.180:4194): pid=22449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/865/file0/bus" dev="ramfs" ino=277520 res=1 03:59:53 executing program 2: socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000840)={{0x5, 0x6, 0x9, 0x8, 'syz0\x00', 0x3}, 0x2, 0x20000000, 0x7fbb00d5, 0x0, 0x5, 0x0, 'syz1\x00', &(0x7f0000000680)=['em0vboxnet1[md5sumvboxnet1system\x00', '\x00', 'keyringGPLuserselinux*,ppp1\x00', '\x00', ']mime_type[vboxnet1ppp0#)\x00'], 0x59, [], [0x9]}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha224-ssse3,ctr-camellia-asm)\x00'}, 0x58) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r4, 0x304, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000028c0)="b7da122b", 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@rand_addr}, 0x8) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r5, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x77359400}, 0x0, 0x1}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x74b, @dev={0xfe, 0x80, [], 0xe}, 0x8e}}, 0x20, 0x7e5, 0xb0b, 0xf82, 0x9467}, &(0x7f0000000840)=0x98) [ 2047.518566] FAT-fs (loop1): Unrecognized mount option "1" or missing value [ 2047.581040] audit: type=1804 audit(2000001593.380:4195): pid=22449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/865/file0/file0/bus" dev="ramfs" ino=277542 res=1 03:59:53 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xfe7f, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:53 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) stat(&(0x7f0000000440)='./file1\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140)='$#)vboxnet1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x2004428, &(0x7f0000000700)={'trans=virtio,', {[{@cache_fscache='cache=fscache'}, {@access_any='access=any'}, {@access_user='access=user'}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@nodevmap='nodevmap'}], [{@smackfsroot={'smackfsroot', 0x3d, 'access=any'}}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'trusted[cgroup{#'}}]}}) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x24) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000080)={{0x2, 0x4e22, @remote}, {0x0, @broadcast}, 0x20, {0x2, 0x4e23, @rand_addr=0x1}, 'team_slave_1\x00'}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000004c0)=0x10001, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:53 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000600000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2047.695434] audit: type=1804 audit(2000001593.430:4196): pid=22457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/865/file0/file0/bus" dev="ramfs" ino=277542 res=1 03:59:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7b010000) 03:59:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) [ 2047.882433] FAT-fs (loop2): bogus number of reserved sectors [ 2047.898698] FAT-fs (loop1): bogus number of reserved sectors [ 2047.928207] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2047.982801] audit: type=1804 audit(2000001593.770:4197): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/866/file0/bus" dev="ramfs" ino=276999 res=1 [ 2048.017008] FAT-fs (loop2): Can't find a valid FAT filesystem 03:59:53 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000070000000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2048.054688] audit: type=1804 audit(2000001593.860:4198): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/866/file0/bus" dev="ramfs" ino=276999 res=1 [ 2048.165926] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:54 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x4}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) [ 2048.205767] audit: type=1804 audit(2000001594.010:4199): pid=22510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/866/file0/file0/bus" dev="ramfs" ino=277025 res=1 03:59:54 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xed) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004e00)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000004f00)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000005e40)={&(0x7f0000000080), 0xc, &(0x7f0000005e00)={&(0x7f0000004f40)=@deltfilter={0xe9c, 0x2d, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, r3, {0xf, 0x3}, {0x7, 0xf}, {0x17, 0xfff7}}, [@filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x550, 0x2, [@TCA_FW_POLICE={0x408, 0x2, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff83de6a33, 0x2, 0x9, 0xff98, 0x0, 0x81, 0x6, 0x3, 0x6, 0x1, 0x7ff, 0x700aeca, 0xffffffff, 0x400, 0x81, 0xc8, 0xfffffffffffffff7, 0x2, 0xb43, 0xffc0000000000000, 0x2, 0x8001, 0xffffffff, 0x7, 0x4, 0x1, 0x8, 0x1, 0x20, 0xe25e, 0x1, 0x6b2, 0xfffffffffffffa8f, 0x7, 0xc9e, 0x7, 0x5, 0xfffffffffffff001, 0x5, 0x1, 0x2, 0x3, 0x2, 0x400000, 0x10001, 0x3, 0x0, 0xffffffff, 0x6, 0xff, 0x6, 0x3, 0x7, 0x100000001, 0x1, 0xfff, 0x7, 0x1ff, 0xc26, 0xbd, 0x8140, 0x0, 0x7, 0x0, 0x9, 0xbd, 0x1ff, 0x9, 0x2, 0x9, 0xffffffffffffad17, 0x7f, 0xc44, 0x8, 0x2, 0x1f, 0x1ff, 0x40, 0x2, 0x85, 0x80000000, 0x6, 0x6, 0x4, 0x5, 0x6, 0x7f, 0x7, 0x4, 0xba40000000, 0x0, 0xfffffffffffffffb, 0x3, 0x8, 0x5, 0x1, 0x1, 0x0, 0x2, 0x2, 0x5, 0x2, 0x3c, 0x3f, 0x400, 0x4, 0x7, 0x4, 0x7, 0xc69, 0x5, 0x5, 0x2, 0x401, 0x2, 0x7, 0xffffffff, 0x3, 0xfffffffffffffffb, 0x10000, 0x4565, 0x0, 0x7, 0x3, 0x7, 0x6, 0x0, 0x6, 0x5, 0x3, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff9, 0x7, 0x6, 0x6, 0x0, 0x9, 0x1ff, 0x8, 0x2b, 0x1, 0x1, 0x8, 0xdf1, 0x7, 0xf3b6, 0x49, 0x6, 0x400, 0xe5, 0x2, 0x2, 0x0, 0x6, 0x1, 0x8, 0x100, 0xd26, 0xb4c, 0x7fffffff, 0x7ff, 0xed2, 0x7f, 0xfffffffffffffffc, 0xa329, 0x2, 0x100000000, 0x8, 0x2, 0x5d7, 0x2, 0xffffffff, 0xffe0000000000000, 0x5, 0x3f, 0xe3bd, 0x13, 0x1ffc000, 0x0, 0xf48f, 0xf2, 0x1, 0x3, 0x79, 0x4a, 0x7, 0x32, 0x7fff, 0x3, 0x7, 0x800000000000000, 0x97, 0x9, 0x5, 0x3, 0xc5a2, 0x200, 0xffffffffffffff81, 0x0, 0x0, 0xa2, 0x2, 0x3, 0x5, 0x2, 0xffffffffffffff48, 0xfff, 0x7fffffff, 0x7, 0x3, 0x4, 0xe4d, 0x8, 0x1, 0x9, 0x401, 0x4, 0x7fff, 0x2, 0x9, 0x0, 0x0, 0x9, 0x64, 0x2, 0x8, 0x8f02, 0x1, 0xfffffffffffffff7, 0x100000000, 0x7ace805f, 0x94, 0x7fffffff, 0xffffffff, 0x100, 0x375, 0x2, 0x1, 0xffffffffffffffe1, 0x400000000000000, 0x4, 0x6, 0x8, 0xffffffffffffc464, 0xc000000000000000, 0x2, 0xb1e, 0x36e9, 0x40, 0x625, 0x7, 0x3, 0x1000, 0x1, 0x7]}}, @TCA_FW_POLICE={0xc, 0x2, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}}, @TCA_FW_ACT={0x138, 0x4, @m_bpf={0x134, 0x1d, {{0x8, 0x1, 'bpf\x00'}, {0x40, 0x2, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0xa}]}, {0xe4, 0x6, "27e62843ded76852e979b0b61a476e67d57a6683e81e5726b2f11814658c1d0e73a4f4b9b1038ae83eb830cc8532491a972bed316d6dd6c4c11d8274df5a434bc932db61f542f832d099d0dafdbaea8324854e05709257feb52f691a6acc3b00fbf1ff0fb9110449ca4d1f99aefbad23abbba6f9f79c6f40d2218d9be3f5903899161c003edda77d8a0351bf5852d5cfb05a4c6fb6cd250f881f4c1801f35ab860684e1e5dbc1238ff6994a4bf83cc7126519174de3a8818d7833ea8a95a23379d2d911bff6d90877cf139d84ebcc79615da0cbb2fa9b83709d14d1a8aff0c"}}}}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x8, 0x5, {0x3f, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x520, 0x2, [@TCA_FW_ACT={0x114, 0x4, @m_simple={0x110, 0x1f, {{0xc, 0x1, 'simple\x00'}, {0x90, 0x2, [@TCA_DEF_DATA={0x14, 0x3, 'version=9p2000.u'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xff80000000000000, 0x7, 0x4, 0x5}}, @TCA_DEF_DATA={0x10, 0x3, "fe7573657247504c00"}, @TCA_DEF_PARMS={0x18, 0x2, {0x1f, 0x7, 0xc, 0x2, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, '9p\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x80000001, 0x3, 0x3, 0xfffffffffffffffa}}, @TCA_DEF_DATA={0xc, 0x3, 'em1\\em1\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'rfdno'}]}, {0x6c, 0x6, "1e3f4baec718dde88eed4f17a251e1bd751181f4f4679025c01dc872a79ed1a2b9af0ac655b04808b6ebce72663ab1383549788a2357dde312be87aa63bf0d91c93ba4127bcef755ffa330ee188345df57b0822e28543bdd5a7bbf13f1ac89db4e487be5c8c96c09"}}}}, @TCA_FW_POLICE={0x408, 0x2, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x77, 0xfffffffffffffffe, 0x44ea6aba, 0x77a10b01, 0x7ff, 0x310, 0x9, 0x81, 0x800, 0x7f, 0x8, 0x8, 0x8, 0x7fffffff, 0x80000000, 0xb4, 0x7, 0x2164, 0xfffffffffffff573, 0x2, 0x100000000, 0x8, 0x3f, 0x9, 0xfff, 0x1f, 0x8, 0x8001, 0x7fff, 0x401f0000000000, 0x9, 0x0, 0x7ff, 0x800, 0x8, 0x8001, 0x62, 0x0, 0x3, 0x6, 0xff, 0x4, 0x94, 0x5, 0x4899, 0x200, 0xfffffffffffffffb, 0x534, 0x47, 0x9, 0x6, 0x460, 0x8, 0x4, 0xffffffff00000001, 0x9, 0x90d, 0xffffffff00000001, 0x4, 0x1000, 0x3ff, 0x170, 0x7fffffff, 0xfffffffffffffff8, 0xfff, 0x7ff, 0x4340, 0x1, 0x8, 0xfffffffffffffffb, 0x9c44, 0x2, 0x4, 0xecc, 0x8001, 0x100000000, 0xf63, 0x0, 0x42e, 0x9, 0xfffffffffffffffa, 0x7, 0x3141, 0x5, 0x7, 0xffffffff80000000, 0x9, 0x5, 0x800, 0x3, 0x3, 0x4, 0xcb, 0xfffffffffffffffd, 0x2, 0x401, 0x94e, 0x7fff, 0x4, 0x3, 0x0, 0xffff, 0x401, 0x1000, 0x10000, 0x2, 0x6, 0x4, 0x8, 0x7, 0x3, 0xf10b, 0x5a37, 0x7, 0xa2c, 0x2, 0x9, 0x5, 0x1000, 0x7, 0x36a, 0x3, 0x800, 0x4, 0x1, 0x100000001, 0x9, 0x79c02f2e, 0x0, 0x80, 0xa5, 0x4, 0x9, 0xfffffffffffff801, 0xffffffff, 0x7, 0x100000001, 0x8, 0x7, 0x100000000, 0x5, 0xf1, 0x1, 0x1, 0x6, 0x2, 0xbfb, 0x1000, 0x8, 0x7, 0x7fff, 0xffffffff80000000, 0xffffffffffffffe1, 0x8000, 0x0, 0x100, 0x2fb4, 0x10000, 0xff, 0x1, 0x4, 0x8, 0x80000001, 0xff, 0x7, 0x2f13a2d700000, 0x673, 0x1, 0x7, 0x6, 0x4, 0x8, 0x351f, 0x2, 0x3, 0x7, 0x3f, 0x9c800000000, 0x512b345, 0x2, 0x9, 0xff, 0x6, 0x10001, 0x9, 0x6, 0x2, 0x1, 0x0, 0x6, 0x4, 0xd741, 0x56, 0x45d0, 0x7fffffff, 0x400, 0x7, 0xfffffffffffffffd, 0xa56, 0x5, 0x1f, 0x3, 0xa88, 0x4, 0x2, 0x0, 0x1ff, 0x156e, 0x200, 0x4, 0xfffffffffffffffa, 0x1, 0xfffffffffffffffd, 0x100000000, 0x2, 0x400, 0x62, 0x1, 0x60000, 0xd190, 0x40, 0xfffffffffffffff8, 0x3, 0x8, 0x2000200000, 0x2, 0x7, 0x235, 0x7, 0x800, 0x1, 0x6e, 0x100000001, 0x80, 0x800, 0x400, 0x5, 0x100, 0x4, 0x1, 0x40, 0xc85, 0x9, 0x7f, 0x5, 0x800, 0x9, 0x1, 0x8000, 0xfffffffffffffffa, 0x6, 0x4, 0x4, 0x800, 0x67, 0x7]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x3bc, 0x2, [@TCA_RSVP_POLICE={0xc, 0x5, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9b68, 0xff, 0x55e}, {0xf0, 0x6, 0x7ff}, 0x33, 0x1, 0x330, 0x6}}, @TCA_RSVP_ACT={0x12c, 0x6, @m_gact={0x128, 0x1b, {{0xc, 0x1, 'gact\x00'}, {0x88, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x9f1, 0x30000007}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x3bd, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x7, 0x8, 0x8, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1f, 0x2, 0x20000006, 0xffff, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100000, 0x3, 0x0, 0x6, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x631, 0x7}}]}, {0x8c, 0x6, "c548ddf53d78dfb57cd60c908f1dcb8a692df0bcb32c2bbd9aa86b2cf9abf1fc1f07b9bdd9c60d893c76112612c0824b76d795f168521dea382bea86327efa36b4d0d5760ed6b08460cc3bbb75db63c11cfa4b8975de68b4348342a5e74aa413134186c4e51c67d2b8c1d69534522745767f6f509651a48053c687dd0e836dd41a2fe11a99a523"}}}}, @TCA_RSVP_POLICE={0x40, 0x5, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x4, 0x3ff, 0x3ff, {0xd5, 0x3, 0x0, 0x0, 0x6, 0x6}, {0x1, 0x0, 0x80000001, 0x0, 0xfffffffffffffffe, 0x28}, 0x0, 0x7, 0x80}}}, @TCA_RSVP_ACT={0x170, 0x6, @m_bpf={0x16c, 0x1c, {{0x8, 0x1, 'bpf\x00'}, {0x124, 0x2, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x7, 0x911, 0xffffffff00000001, 0x9}, {0x5, 0x7, 0x90, 0x400}, {0x9, 0x8, 0x4, 0xfffffffffffffc00}, {0xffffffff, 0x412, 0x7, 0x800}, {0x3, 0x9, 0xa1, 0x6ec}, {0x4, 0x3, 0x6, 0x7f}, {0xffff, 0xfffffffffffff801, 0xffffffff7fffffff, 0x1}, {0xffffffff, 0x4, 0x10001, 0x2}, {0x40, 0x0, 0x200}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x800000, 0x20000000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x3ee, 0x8, 0x45945775, 0x20}, {0xc84, 0x1000, 0x8001, 0xa24d}, {0x1ff, 0x3, 0x3f, 0x2}, {0x7, 0x0, 0x1ff, 0xbcb1}, {0x7, 0x80000001, 0x80000000, 0x407}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x1f, 0x1, 0x1a2a0746, 0x56}}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x1812ced2, 0xfff, 0x8, 0x328ca1ce}, {0x6, 0xb3, 0x2dd4, 0x9}, {0x100, 0xffffffff, 0x7}, {0x5cb, 0xdc5e, 0x9, 0x1}, {0x3, 0x5b, 0xb7, 0xdd54}, {0x7, 0x9, 0x8, 0x1}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1c00000, 0x7, 0x220f}, {0x8, 0x0, 0x75, 0x7ff}, {0x14729022, 0xfff, 0x8000, 0x3}, {0x1f, 0x3b38, 0x8, 0x1}, {0x6, 0x1, 0x81, 0x8}]}]}, {0x38, 0x6, "ff1a217a3777bf450d68af68a556aff13d8884d2579046b73753647364c1af56d82b9d01ca5154e8661dae6f3cf7779538ef4938"}}}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0xe953, 0x9}, {0x399, 0x4, 0x3}, 0xa5, 0x7fff, 0x7, 0x9}}, @TCA_RSVP_ACT={0x60, 0x6, @m_bpf={0x5c, 0x1e, {{0x8, 0x1, 'bpf\x00'}, {0x34, 0x2, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xe035, 0x1ff, 0x2, 0x20, 0x800}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x18, 0x6, "04325eb1e51908cf0e70052ab018744d70d866e7"}}}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x8, 0x5, {0x100, 0x1c}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0xc840}, 0x8040) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x6b7b) [ 2048.365981] audit: type=1804 audit(2000001594.060:4200): pid=22531 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/866/file0/file0/bus" dev="ramfs" ino=277025 res=1 03:59:54 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x7f04, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:54 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000006800000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:54 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:54 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x100) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2048.557308] FAULT_INJECTION: forcing a failure. [ 2048.557308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2048.570726] CPU: 0 PID: 22565 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #293 [ 2048.578109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2048.587487] Call Trace: [ 2048.590093] dump_stack+0x1c4/0x2b4 [ 2048.593738] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2048.598940] ? print_usage_bug+0xc0/0xc0 [ 2048.603025] should_fail.cold.4+0xa/0x17 [ 2048.607097] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2048.612204] ? __lock_acquire+0x7ec/0x4ec0 [ 2048.616446] ? graph_lock+0x170/0x170 [ 2048.620249] ? print_usage_bug+0xc0/0xc0 [ 2048.624316] ? graph_lock+0x170/0x170 [ 2048.628122] ? print_usage_bug+0xc0/0xc0 [ 2048.632200] ? __lock_is_held+0xb5/0x140 [ 2048.636357] ? ldsem_down_write_trylock+0x170/0x260 [ 2048.641388] ? __lock_acquire+0x7ec/0x4ec0 [ 2048.645646] ? ___might_sleep+0x1ed/0x300 [ 2048.649798] ? lock_release+0x970/0x970 [ 2048.653783] ? arch_local_save_flags+0x40/0x40 [ 2048.658386] ? __might_sleep+0x95/0x190 [ 2048.662367] __alloc_pages_nodemask+0x34b/0xde0 [ 2048.667040] ? graph_lock+0x170/0x170 [ 2048.670858] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 2048.675886] ? print_usage_bug+0xc0/0xc0 [ 2048.679967] ? check_noncircular+0x20/0x20 [ 2048.684208] ? print_usage_bug+0xc0/0xc0 [ 2048.688270] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2048.693806] ? pud_huge+0xc1/0x110 [ 2048.697361] ? pmd_huge+0x150/0x150 [ 2048.700997] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2048.706541] alloc_pages_current+0x10c/0x210 [ 2048.710954] pte_alloc_one+0x1b/0x1a0 [ 2048.714764] do_huge_pmd_anonymous_page+0xc37/0x18a0 [ 2048.719881] ? __thp_get_unmapped_area+0x180/0x180 [ 2048.724819] ? mark_held_locks+0x130/0x130 [ 2048.729065] ? __lock_acquire+0x7ec/0x4ec0 [ 2048.733305] ? print_usage_bug+0xc0/0xc0 [ 2048.737376] ? pud_val+0x88/0x100 [ 2048.740840] ? __pmd+0x60/0x60 [ 2048.744052] __handle_mm_fault+0x3880/0x53e0 [ 2048.748470] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 2048.753312] ? graph_lock+0x170/0x170 [ 2048.757145] ? print_usage_bug+0xc0/0xc0 [ 2048.761214] ? graph_lock+0x170/0x170 [ 2048.765015] ? graph_lock+0x170/0x170 [ 2048.768846] ? handle_mm_fault+0x42a/0xc70 [ 2048.773087] ? lock_downgrade+0x900/0x900 [ 2048.777241] ? check_preemption_disabled+0x48/0x200 [ 2048.782267] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2048.788064] ? kasan_check_read+0x11/0x20 [ 2048.792214] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2048.797493] ? rcu_bh_qs+0xc0/0xc0 [ 2048.801038] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2048.806496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2048.812037] ? check_preemption_disabled+0x48/0x200 [ 2048.817067] handle_mm_fault+0x54f/0xc70 [ 2048.821138] ? __handle_mm_fault+0x53e0/0x53e0 [ 2048.825717] ? find_vma+0x34/0x190 [ 2048.829266] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2048.834289] __get_user_pages+0x806/0x1b30 [ 2048.838538] ? follow_page_mask+0x1fb0/0x1fb0 [ 2048.843035] ? lock_acquire+0x1ed/0x520 [ 2048.847011] ? get_user_pages_unlocked+0xfd/0x5d0 [ 2048.851875] ? lock_release+0x970/0x970 [ 2048.855869] ? arch_local_save_flags+0x40/0x40 [ 2048.860455] ? print_usage_bug+0xc0/0xc0 [ 2048.864518] ? print_usage_bug+0xc0/0xc0 [ 2048.868599] ? down_read+0xb0/0x1d0 [ 2048.872230] ? get_user_pages_unlocked+0xfd/0x5d0 [ 2048.877081] ? __down_interruptible+0x700/0x700 [ 2048.881757] ? __lock_acquire+0x7ec/0x4ec0 [ 2048.886006] get_user_pages_unlocked+0x2fc/0x5d0 [ 2048.890778] ? get_user_pages_longterm+0x650/0x650 [ 2048.895721] get_user_pages_fast+0x322/0x450 [ 2048.900141] ? __get_user_pages_fast+0x3f0/0x3f0 [ 2048.904915] iov_iter_get_pages+0x2c9/0x1210 [ 2048.909333] ? csum_and_copy_to_iter+0x1490/0x1490 [ 2048.914264] ? print_usage_bug+0xc0/0xc0 [ 2048.918331] ? aa_profile_af_perm+0x410/0x410 [ 2048.922847] ? find_held_lock+0x36/0x1c0 [ 2048.926925] ? mark_held_locks+0xc7/0x130 [ 2048.931084] ? __local_bh_enable_ip+0x160/0x260 [ 2048.935754] ? __local_bh_enable_ip+0x160/0x260 [ 2048.940425] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2048.945079] af_alg_make_sg+0x9f/0x550 [ 2048.948975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2048.954522] ? check_preemption_disabled+0x48/0x200 [ 2048.959549] ? af_alg_wmem_wakeup+0x7d0/0x7d0 [ 2048.964104] ? rmd256_init+0x1c0/0x220 [ 2048.968012] hash_sendmsg+0x46d/0xae0 [ 2048.971822] ? hash_recvmsg+0xa60/0xa60 [ 2048.975811] sock_sendmsg+0xd5/0x120 [ 2048.979536] ___sys_sendmsg+0x7fd/0x930 [ 2048.983512] ? find_held_lock+0x36/0x1c0 [ 2048.987582] ? copy_msghdr_from_user+0x580/0x580 [ 2048.992344] ? lock_downgrade+0x900/0x900 [ 2048.996503] ? proc_fail_nth_write+0x9e/0x210 [ 2049.001009] ? __fget_light+0x2e9/0x430 [ 2049.004991] ? fget_raw+0x20/0x20 [ 2049.008451] ? kasan_check_write+0x14/0x20 [ 2049.012693] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2049.017636] ? wait_for_completion+0x8a0/0x8a0 [ 2049.022236] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2049.027788] ? sockfd_lookup_light+0xc5/0x160 [ 2049.032290] __sys_sendmsg+0x11d/0x280 [ 2049.036182] ? __ia32_sys_shutdown+0x80/0x80 [ 2049.040596] ? __sb_end_write+0xd9/0x110 [ 2049.044661] ? fput+0x130/0x1a0 [ 2049.047948] ? do_syscall_64+0x9a/0x820 [ 2049.051926] ? do_syscall_64+0x9a/0x820 [ 2049.055924] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2049.061390] __x64_sys_sendmsg+0x78/0xb0 [ 2049.065456] do_syscall_64+0x1b9/0x820 [ 2049.069348] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2049.074719] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2049.079650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2049.084496] ? trace_hardirqs_on_caller+0x310/0x310 [ 2049.089518] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2049.094542] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2049.099570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2049.104427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2049.109615] RIP: 0033:0x457569 [ 2049.112810] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2049.131721] RSP: 002b:00007f4ba75a9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2049.139438] RAX: ffffffffffffffda RBX: 00007f4ba75a9c90 RCX: 0000000000457569 [ 2049.146709] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 2049.153982] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2049.161253] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ba75aa6d4 [ 2049.168529] R13: 00000000004c37e5 R14: 00000000004d55e0 R15: 0000000000000005 03:59:55 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3400) [ 2049.220020] FAT-fs (loop1): bogus number of reserved sectors [ 2049.244218] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:55 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000fffffffd0000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2049.305021] audit: type=1804 audit(2000001595.110:4201): pid=22571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/867/file0/bus" dev="ramfs" ino=277710 res=1 [ 2049.384293] FAULT_INJECTION: forcing a failure. [ 2049.384293] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.401768] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2049.423192] audit: type=1804 audit(2000001595.150:4202): pid=22571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/867/file0/bus" dev="ramfs" ino=277710 res=1 [ 2049.425270] CPU: 1 PID: 22592 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #293 [ 2049.454578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2049.463943] Call Trace: [ 2049.466553] dump_stack+0x1c4/0x2b4 [ 2049.470199] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2049.470231] should_fail.cold.4+0xa/0x17 [ 2049.470251] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2049.484599] ? check_preemption_disabled+0x48/0x200 [ 2049.489629] ? check_preemption_disabled+0x48/0x200 [ 2049.494665] ? graph_lock+0x170/0x170 [ 2049.494686] ? graph_lock+0x170/0x170 [ 2049.494713] ? find_held_lock+0x36/0x1c0 [ 2049.494732] ? __lock_is_held+0xb5/0x140 [ 2049.494761] ? ___might_sleep+0x1ed/0x300 [ 2049.494781] ? arch_local_save_flags+0x40/0x40 [ 2049.519221] ? check_noncircular+0x20/0x20 [ 2049.523474] __should_failslab+0x124/0x180 [ 2049.523496] should_failslab+0x9/0x14 [ 2049.523518] kmem_cache_alloc+0x2be/0x730 [ 2049.535775] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2049.541336] ptlock_alloc+0x20/0x80 [ 2049.544974] pte_alloc_one+0x6b/0x1a0 [ 2049.548784] do_huge_pmd_anonymous_page+0xc37/0x18a0 [ 2049.553906] ? __thp_get_unmapped_area+0x180/0x180 [ 2049.558857] ? mark_held_locks+0x130/0x130 [ 2049.563096] ? __lock_acquire+0x7ec/0x4ec0 [ 2049.567341] ? print_usage_bug+0xc0/0xc0 [ 2049.571425] ? pud_val+0x88/0x100 [ 2049.574886] ? __pmd+0x60/0x60 [ 2049.578092] __handle_mm_fault+0x3880/0x53e0 [ 2049.582515] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 2049.587362] ? graph_lock+0x170/0x170 [ 2049.591170] ? print_usage_bug+0xc0/0xc0 [ 2049.595236] ? graph_lock+0x170/0x170 [ 2049.599037] ? graph_lock+0x170/0x170 [ 2049.602867] ? handle_mm_fault+0x42a/0xc70 [ 2049.607111] ? lock_downgrade+0x900/0x900 [ 2049.611262] ? check_preemption_disabled+0x48/0x200 [ 2049.616289] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2049.622091] ? kasan_check_read+0x11/0x20 [ 2049.626243] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2049.631527] ? rcu_bh_qs+0xc0/0xc0 [ 2049.635071] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2049.640531] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2049.646073] ? check_preemption_disabled+0x48/0x200 [ 2049.651102] handle_mm_fault+0x54f/0xc70 [ 2049.655176] ? __handle_mm_fault+0x53e0/0x53e0 [ 2049.659756] ? find_vma+0x34/0x190 [ 2049.663306] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2049.668329] __get_user_pages+0x806/0x1b30 [ 2049.672580] ? follow_page_mask+0x1fb0/0x1fb0 [ 2049.677077] ? lock_acquire+0x1ed/0x520 [ 2049.681057] ? get_user_pages_unlocked+0xfd/0x5d0 [ 2049.685910] ? lock_release+0x970/0x970 [ 2049.689891] ? arch_local_save_flags+0x40/0x40 [ 2049.694474] ? print_usage_bug+0xc0/0xc0 [ 2049.698539] ? print_usage_bug+0xc0/0xc0 [ 2049.702618] ? down_read+0xb0/0x1d0 [ 2049.706248] ? get_user_pages_unlocked+0xfd/0x5d0 [ 2049.711097] ? __down_interruptible+0x700/0x700 [ 2049.715773] ? __lock_acquire+0x7ec/0x4ec0 [ 2049.720021] get_user_pages_unlocked+0x2fc/0x5d0 [ 2049.724789] ? get_user_pages_longterm+0x650/0x650 [ 2049.729732] get_user_pages_fast+0x322/0x450 [ 2049.734153] ? __get_user_pages_fast+0x3f0/0x3f0 [ 2049.738931] iov_iter_get_pages+0x2c9/0x1210 [ 2049.743349] ? csum_and_copy_to_iter+0x1490/0x1490 [ 2049.748281] ? print_usage_bug+0xc0/0xc0 [ 2049.752348] ? aa_profile_af_perm+0x410/0x410 [ 2049.756862] ? find_held_lock+0x36/0x1c0 [ 2049.760932] ? mark_held_locks+0xc7/0x130 [ 2049.765089] ? __local_bh_enable_ip+0x160/0x260 [ 2049.769762] ? __local_bh_enable_ip+0x160/0x260 [ 2049.774433] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2049.779024] af_alg_make_sg+0x9f/0x550 [ 2049.782919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2049.788462] ? check_preemption_disabled+0x48/0x200 [ 2049.793484] ? af_alg_wmem_wakeup+0x7d0/0x7d0 [ 2049.797988] ? rmd256_init+0x1c0/0x220 [ 2049.801888] hash_sendmsg+0x46d/0xae0 [ 2049.805702] ? hash_recvmsg+0xa60/0xa60 [ 2049.809686] sock_sendmsg+0xd5/0x120 [ 2049.813414] ___sys_sendmsg+0x7fd/0x930 [ 2049.817389] ? find_held_lock+0x36/0x1c0 [ 2049.821468] ? copy_msghdr_from_user+0x580/0x580 [ 2049.826228] ? lock_downgrade+0x900/0x900 [ 2049.830381] ? proc_fail_nth_write+0x9e/0x210 [ 2049.834893] ? __fget_light+0x2e9/0x430 [ 2049.838875] ? fget_raw+0x20/0x20 [ 2049.842335] ? kasan_check_write+0x14/0x20 [ 2049.846578] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2049.851515] ? wait_for_completion+0x8a0/0x8a0 [ 2049.856116] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2049.861657] ? sockfd_lookup_light+0xc5/0x160 [ 2049.866160] __sys_sendmsg+0x11d/0x280 [ 2049.870053] ? __ia32_sys_shutdown+0x80/0x80 [ 2049.874463] ? __sb_end_write+0xd9/0x110 [ 2049.878534] ? fput+0x130/0x1a0 [ 2049.881821] ? do_syscall_64+0x9a/0x820 [ 2049.885810] ? do_syscall_64+0x9a/0x820 [ 2049.889807] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2049.895275] __x64_sys_sendmsg+0x78/0xb0 [ 2049.899346] do_syscall_64+0x1b9/0x820 [ 2049.903239] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2049.908611] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2049.913545] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2049.918392] ? trace_hardirqs_on_caller+0x310/0x310 [ 2049.923422] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2049.928446] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2049.933472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2049.938329] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2049.943521] RIP: 0033:0x457569 [ 2049.946724] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2049.965631] RSP: 002b:00007f4ba75a9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2049.973346] RAX: ffffffffffffffda RBX: 00007f4ba75a9c90 RCX: 0000000000457569 03:59:55 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2049.980622] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 2049.987893] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2049.995161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ba75aa6d4 [ 2050.002432] R13: 00000000004c37e5 R14: 00000000004d55e0 R15: 0000000000000005 03:59:55 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:55 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xb87, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:55 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000006c0000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x500000000000000) 03:59:56 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x40000) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x80000) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:56 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) [ 2050.303372] FAT-fs (loop1): bogus number of reserved sectors [ 2050.337383] FAULT_INJECTION: forcing a failure. [ 2050.337383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2050.396326] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2050.420613] CPU: 0 PID: 22636 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #293 [ 2050.428030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.428039] Call Trace: [ 2050.428067] dump_stack+0x1c4/0x2b4 [ 2050.428092] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2050.428113] ? is_bpf_text_address+0xac/0x170 [ 2050.428138] ? check_preemption_disabled+0x48/0x200 [ 2050.428162] should_fail.cold.4+0xa/0x17 [ 2050.428186] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2050.428209] ? rb_next+0x140/0x140 [ 2050.453449] ? unwind_dump+0x190/0x190 [ 2050.453469] ? graph_lock+0x170/0x170 [ 2050.453488] ? graph_lock+0x170/0x170 [ 2050.453510] ? mark_held_locks+0x130/0x130 [ 2050.453533] ? __lock_is_held+0xb5/0x140 [ 2050.467714] ? ___might_sleep+0x1ed/0x300 [ 2050.467730] ? lock_release+0x970/0x970 [ 2050.467748] ? arch_local_save_flags+0x40/0x40 [ 2050.467763] ? print_usage_bug+0xc0/0xc0 [ 2050.467779] ? pte_alloc_one+0x6b/0x1a0 [ 2050.467796] ? do_huge_pmd_anonymous_page+0xc37/0x18a0 [ 2050.467817] ? __handle_mm_fault+0x3880/0x53e0 [ 2050.482848] ? handle_mm_fault+0x54f/0xc70 [ 2050.482876] ? __might_sleep+0x95/0x190 [ 2050.482905] __alloc_pages_nodemask+0x34b/0xde0 [ 2050.482925] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2050.495375] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 2050.495395] ? __sanitizer_cov_trace_cmp8+0x1/0x20 [ 2050.495435] ? print_usage_bug+0xc0/0xc0 [ 2050.495450] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2050.495470] ? pud_huge+0xc1/0x110 [ 2050.495483] ? pmd_huge+0x150/0x150 [ 2050.495497] ? __update_load_avg_se+0xb90/0xb90 [ 2050.504359] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2050.504381] alloc_pages_current+0x10c/0x210 [ 2050.504401] pte_alloc_one+0x1b/0x1a0 [ 2050.504424] do_huge_pmd_anonymous_page+0xc37/0x18a0 [ 2050.590944] ? __thp_get_unmapped_area+0x180/0x180 [ 2050.595887] ? mark_held_locks+0x130/0x130 [ 2050.600132] ? __lock_acquire+0x7ec/0x4ec0 [ 2050.604381] ? attach_entity_load_avg+0x860/0x860 [ 2050.609234] ? find_held_lock+0x36/0x1c0 [ 2050.613300] ? pud_val+0x88/0x100 [ 2050.616754] ? __pmd+0x60/0x60 [ 2050.619957] ? rb_erase+0x3710/0x3710 [ 2050.623772] __handle_mm_fault+0x3880/0x53e0 [ 2050.628199] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 2050.633050] ? graph_lock+0x170/0x170 [ 2050.636861] ? print_usage_bug+0xc0/0xc0 [ 2050.640930] ? graph_lock+0x170/0x170 [ 2050.644734] ? graph_lock+0x170/0x170 [ 2050.648553] ? handle_mm_fault+0x42a/0xc70 [ 2050.652795] ? lock_downgrade+0x900/0x900 [ 2050.656957] ? check_preemption_disabled+0x48/0x200 [ 2050.661984] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2050.667785] ? kasan_check_read+0x11/0x20 [ 2050.671943] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2050.677224] ? rcu_bh_qs+0xc0/0xc0 [ 2050.680766] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2050.686224] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2050.691767] ? check_preemption_disabled+0x48/0x200 [ 2050.696794] handle_mm_fault+0x54f/0xc70 [ 2050.700871] ? __handle_mm_fault+0x53e0/0x53e0 [ 2050.705545] ? find_vma+0x34/0x190 [ 2050.709094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2050.714123] __get_user_pages+0x806/0x1b30 [ 2050.718379] ? follow_page_mask+0x1fb0/0x1fb0 [ 2050.722879] ? lock_acquire+0x1ed/0x520 [ 2050.726870] ? get_user_pages_unlocked+0xfd/0x5d0 [ 2050.731727] ? lock_release+0x970/0x970 [ 2050.735703] ? arch_local_save_flags+0x40/0x40 [ 2050.740310] ? down_read+0xb0/0x1d0 [ 2050.743940] ? get_user_pages_unlocked+0xfd/0x5d0 [ 2050.748791] ? __down_interruptible+0x700/0x700 [ 2050.753475] ? kasan_check_read+0x11/0x20 [ 2050.757629] ? finish_task_switch+0x1f5/0x900 [ 2050.762137] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2050.767603] get_user_pages_unlocked+0x2fc/0x5d0 [ 2050.772378] ? get_user_pages_longterm+0x650/0x650 [ 2050.777314] ? __switch_to_asm+0x40/0x70 [ 2050.781377] ? __switch_to_asm+0x34/0x70 [ 2050.785440] ? __switch_to_asm+0x40/0x70 [ 2050.789504] ? __switch_to_asm+0x34/0x70 [ 2050.793568] ? __switch_to_asm+0x40/0x70 [ 2050.797628] ? __switch_to_asm+0x34/0x70 [ 2050.801697] get_user_pages_fast+0x322/0x450 [ 2050.806115] ? __get_user_pages_fast+0x3f0/0x3f0 [ 2050.810889] iov_iter_get_pages+0x2c9/0x1210 [ 2050.815306] ? retint_kernel+0x2d/0x2d [ 2050.819202] ? csum_and_copy_to_iter+0x1490/0x1490 [ 2050.824140] ? rmd256_transform+0xb2/0x1580 [ 2050.828466] ? rmd256_transform+0x20/0x1580 [ 2050.832802] ? memcpy+0x45/0x50 [ 2050.836098] ? rmd256_update+0x13d/0x170 [ 2050.840161] ? kasan_unpoison_shadow+0x35/0x50 [ 2050.844747] ? __asan_allocas_unpoison+0x16/0x20 [ 2050.849508] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2050.854533] ? iov_iter_advance+0x2ec/0x1460 [ 2050.858952] af_alg_make_sg+0x9f/0x550 [ 2050.862857] ? af_alg_unregister_type+0x400/0x400 [ 2050.867707] ? af_alg_wmem_wakeup+0x7d0/0x7d0 [ 2050.872218] hash_sendmsg+0x46d/0xae0 [ 2050.876030] ? hash_recvmsg+0xa60/0xa60 [ 2050.880010] sock_sendmsg+0xd5/0x120 [ 2050.883727] ___sys_sendmsg+0x7fd/0x930 [ 2050.887707] ? find_held_lock+0x36/0x1c0 [ 2050.891781] ? copy_msghdr_from_user+0x580/0x580 [ 2050.896541] ? lock_downgrade+0x900/0x900 [ 2050.900694] ? proc_fail_nth_write+0x9e/0x210 [ 2050.905198] ? __fget_light+0x2e9/0x430 [ 2050.909177] ? fget_raw+0x20/0x20 [ 2050.912641] ? kasan_check_write+0x14/0x20 [ 2050.916879] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2050.921818] ? wait_for_completion+0x8a0/0x8a0 [ 2050.926425] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2050.931963] ? sockfd_lookup_light+0xc5/0x160 [ 2050.936469] __sys_sendmsg+0x11d/0x280 [ 2050.940362] ? __ia32_sys_shutdown+0x80/0x80 [ 2050.944776] ? __sb_end_write+0xd9/0x110 [ 2050.948849] ? fput+0x130/0x1a0 [ 2050.952135] ? do_syscall_64+0x9a/0x820 [ 2050.956111] ? do_syscall_64+0x9a/0x820 [ 2050.960103] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2050.965582] __x64_sys_sendmsg+0x78/0xb0 [ 2050.969647] do_syscall_64+0x1b9/0x820 [ 2050.973539] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2050.978915] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2050.983855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2050.988707] ? trace_hardirqs_on_caller+0x310/0x310 [ 2050.993727] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2050.998783] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2051.003812] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2051.008679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2051.013867] RIP: 0033:0x457569 [ 2051.017071] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2051.035973] RSP: 002b:00007f4ba75a9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 03:59:56 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000007400000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2051.043685] RAX: ffffffffffffffda RBX: 00007f4ba75a9c90 RCX: 0000000000457569 [ 2051.050951] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 2051.058223] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2051.065494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ba75aa6d4 [ 2051.072761] R13: 00000000004c37e5 R14: 00000000004d55e0 R15: 0000000000000005 03:59:56 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) [ 2051.136706] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:57 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0xe4, 0x501000) getdents64(r0, &(0x7f0000000580)=""/236, 0xec) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffffffffffffffff, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="2a001000290100000000000000000000000000000000000000000000000007c95e328d21018f5b5330265b3c97002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xc12, 0x40) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) r3 = dup3(r2, r2, 0x80000) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x54) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:57 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000000900000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:57 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x707000000000000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:57 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x70001c0) 03:59:57 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000040)={0x3d, 0x6f, 0x1, {0x4, [{0x20, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x3, 0x5}, {0x0, 0x1, 0x6}]}}, 0x3d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2051.469773] FAT-fs (loop1): bogus number of reserved sectors 03:59:57 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000480000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2051.514286] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(r0, r0, 0x80000) write$P9_RCLUNK(r1, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x804) write$P9_RUNLINKAT(r3, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x3}}]}}) write$P9_RREADDIR(r3, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r3, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3ddbecdb3619a7debe829c85e58fdad979342561ccb19be30e6aadbce41f03bba87acbd146d18a04bc88e43e873c53cb342659cb72c251c2477c83cc045ce5061782db6c9be13ac3ce1d9d6802aab853ab1f46d01e5021ae4874631e5c7830f3", @ANYRESHEX=r3, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2051.667908] FAT-fs (loop1): Unrecognized mount option "0" or missing value 03:59:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000100000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x9f000040) 03:59:57 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) [ 2051.816479] 9pnet: Insufficient options for proto=fd 03:59:57 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000740000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:57 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xa7030000, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) [ 2051.847759] 9pnet: Insufficient options for proto=fd [ 2051.883144] 9pnet: Insufficient options for proto=fd 03:59:57 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trn/', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "ad"}, 0x2, 0x1) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2051.985779] FAT-fs (loop1): bogus number of reserved sectors [ 2052.015635] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:57 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000090000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc000) 03:59:57 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2a956372640100000000000000008c3900000040000002000000321f6abd5b85b300020000040000000000000000000000744e5a43a0daef2b410f18fc1b95c42f"], 0x2a) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getgroups(0x3, &(0x7f0000000140)=[0xee00, 0x0, 0xee01]) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000680)='./file0\x00') write$P9_RGETATTR(r1, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x134, {0x8, 0x1, 0x3}, 0x130, r2, r3, 0x9, 0x7, 0x7ff, 0xe3ca, 0x4db, 0x7, 0x4, 0x4, 0x9fe0, 0x7, 0x6, 0x4, 0x46, 0x0, 0x4}}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) [ 2052.196968] FAT-fs (loop1): Unrecognized mount option "." or missing value 03:59:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x80000000fffffff0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 03:59:58 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000300000000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:58 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0x870b, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:58 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="090100006f01000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xffffff8c) 03:59:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x186) [ 2052.468973] FAT-fs (loop1): bogus number of reserved sectors [ 2052.494433] FAT-fs (loop1): Can't find a valid FAT filesystem 03:59:58 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) dup3(r2, r0, 0x0) 03:59:58 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a000000000000000000000000000000000000000000000000ffffff8000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2052.531681] kauditd_printk_skb: 14 callbacks suppressed [ 2052.531697] audit: type=1804 audit(2000001598.330:4217): pid=22787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/871/file0/bus" dev="ramfs" ino=278698 res=1 [ 2052.598170] audit: type=1804 audit(2000001598.340:4218): pid=22787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/871/file0/bus" dev="ramfs" ino=278698 res=1 03:59:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x8000000000000010, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) [ 2052.653476] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2052.741310] audit: type=1804 audit(2000001598.540:4219): pid=22817 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/871/file0/bus" dev="ramfs" ino=278698 res=1 03:59:58 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000008000000000000000000031c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78cffffff7f9a85afe827389338"], 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x80000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f00000004c0)="92ecbe908d3d76ff7e92a7ae847692cc743b0faa8b05184a1806ad578a3935cb44dc27aebbb3fd5b25fed5511f18e0526a1994c8969021ea5a481bccb79a0a884bf18b558be352afc9b5f70188d10f06c0437208fa2719b23baa6c51acb36757c4375954cad4ec7ca67adb174d000622ac46cd38ae329cd842709de8cf3b423e5af8def0f7bfd4f328f77880196d6b19ce164c8c5573bf2fc9398b0c15f84617a7941490a2fb5e098b20fdb5d2f11ae322fbfe16d4af0fbb56842f5cc63d789af8a34ee9d4228a356163a1deeb347af8b43b97d82f1763473c5eba36807a38c062866c40999bb6ed36edeb39d0302a583519", &(0x7f00000003c0)="dee8909e4f65e9349b60bdf67cf69b862ea7a31b5b41e71902290ec3dbd8f0250f778593b9652ac54f89e237fbaaf2f7988f51b879b17b76a4d40ffae601574fe7742604f9b8fe"}}, &(0x7f0000000600)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) timer_delete(r4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {}]}) sendfile(r3, r3, &(0x7f0000000140)=0xf, 0x7fff) add_key(&(0x7f0000000700)='logon\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9, 0x3f}, 0x8) close(r0) 03:59:58 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000000000003f00000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc0010003) 03:59:58 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a0000000000000000000000000000000000000000000000007fffffff00000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) [ 2052.959148] FAT-fs (loop1): bogus number of reserved sectors [ 2052.984004] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2053.004746] audit: type=1804 audit(2000001598.810:4220): pid=22830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/872/file0/bus" dev="ramfs" ino=278787 res=1 [ 2053.111450] audit: type=1804 audit(2000001598.830:4221): pid=22830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/872/file0/bus" dev="ramfs" ino=278787 res=1 03:59:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b) 03:59:59 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000018000a00000000000000000000000000000000000000000000004c0000000000000001001600000000000200010000000000000000000007000005000500000000000a00000000000000fe8800000000000001000000000000550000000000000000"], 0x80}}, 0x0) 03:59:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x80000000ffffff8d, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) [ 2053.734961] FAT-fs (loop1): Unrecognized mount option "." or missing value [ 2053.766108] audit: type=1804 audit(2000001599.570:4222): pid=22838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/872/file0/file0/bus" dev="ramfs" ino=278459 res=1 [ 2053.800607] audit: type=1804 audit(2000001599.590:4223): pid=22838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir445084264/syzkaller.yfNJlS/872/file0/bus" dev="ramfs" ino=278787 res=1 [ 2058.874149] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! [ 2093.434216] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! [ 2165.114262] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! [ 2213.114239] INFO: task syz-executor0:22858 blocked for more than 140 seconds. [ 2213.121701] Not tainted 4.19.0-rc8+ #293 [ 2213.127060] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2213.135082] syz-executor0 D25400 22858 5345 0x00000004 [ 2213.140745] Call Trace: [ 2213.143377] __schedule+0x86c/0x1ed0 [ 2213.147171] ? __sched_text_start+0x8/0x8 [ 2213.151330] ? mark_held_locks+0x130/0x130 [ 2213.155723] ? graph_lock+0x170/0x170 [ 2213.159538] ? print_usage_bug+0xc0/0xc0 [ 2213.163589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.169192] ? check_preemption_disabled+0x48/0x200 [ 2213.174259] ? check_preemption_disabled+0x48/0x200 [ 2213.179273] ? find_held_lock+0x36/0x1c0 [ 2213.183323] schedule+0xfe/0x460 [ 2213.186749] ? __schedule+0x1ed0/0x1ed0 [ 2213.190727] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2213.195361] ? trace_hardirqs_on+0xbd/0x310 [ 2213.199683] ? kasan_check_read+0x11/0x20 [ 2213.203866] ? __rwsem_down_write_failed_common+0x8db/0x1670 [ 2213.209752] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2213.215243] ? kasan_check_write+0x14/0x20 [ 2213.219472] ? do_raw_spin_lock+0xc1/0x200 [ 2213.223694] __rwsem_down_write_failed_common+0xbb9/0x1670 [ 2213.229417] ? find_held_lock+0x36/0x1c0 [ 2213.233491] ? rwsem_spin_on_owner+0xa30/0xa30 [ 2213.238129] ? __lock_acquire+0x7ec/0x4ec0 [ 2213.242418] ? check_preemption_disabled+0x48/0x200 [ 2213.247890] ? mark_held_locks+0x130/0x130 [ 2213.252269] ? mark_held_locks+0x130/0x130 [ 2213.257246] ? kernel_text_address+0x79/0xf0 [ 2213.261659] ? __kernel_text_address+0xd/0x40 [ 2213.266263] ? unwind_get_return_address+0x61/0xa0 [ 2213.271211] ? __save_stack_trace+0x8d/0xf0 [ 2213.275637] ? save_stack+0xa9/0xd0 [ 2213.279277] ? save_stack+0x43/0xd0 [ 2213.282889] ? __kasan_slab_free+0x102/0x150 [ 2213.287373] ? kasan_slab_free+0xe/0x10 [ 2213.291356] ? kmem_cache_free+0x83/0x290 [ 2213.295549] ? putname+0xf2/0x130 [ 2213.299007] ? filename_lookup+0x39a/0x520 [ 2213.303235] ? user_path_at_empty+0x40/0x50 [ 2213.307637] ? graph_lock+0x170/0x170 [ 2213.311444] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2213.316954] ? trace_hardirqs_off+0xb8/0x310 [ 2213.321385] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2213.325867] ? trace_hardirqs_on+0x310/0x310 [ 2213.330288] ? __lock_is_held+0xb5/0x140 [ 2213.334410] ? lock_acquire+0x1ed/0x520 [ 2213.338392] ? chmod_common+0x1b1/0x590 [ 2213.342358] ? lock_release+0x970/0x970 [ 2213.346398] ? arch_local_save_flags+0x40/0x40 [ 2213.351103] rwsem_down_write_failed+0xe/0x10 [ 2213.355786] ? rwsem_down_write_failed+0xe/0x10 [ 2213.360480] call_rwsem_down_write_failed+0x17/0x30 [ 2213.365560] down_write+0xa5/0x130 [ 2213.369107] ? chmod_common+0x1b1/0x590 [ 2213.373143] ? down_read+0x1d0/0x1d0 [ 2213.377219] ? __sb_start_write+0x1b2/0x370 [ 2213.381553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.387871] chmod_common+0x1b1/0x590 [ 2213.391674] ? filp_close+0x250/0x250 [ 2213.395527] ? kmem_cache_alloc+0x33a/0x730 [ 2213.399855] ? kasan_check_read+0x11/0x20 [ 2213.404062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.409605] ? getname_flags+0x26e/0x5a0 [ 2213.413671] do_fchmodat+0xc3/0x160 [ 2213.417344] ? __ia32_sys_fchmod+0x80/0x80 [ 2213.421586] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2213.427043] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2213.432512] __x64_sys_chmod+0x5c/0x80 [ 2213.436546] do_syscall_64+0x1b9/0x820 [ 2213.440449] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2213.445902] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2213.450853] ? trace_hardirqs_on_caller+0x310/0x310 [ 2213.455934] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2213.460961] ? recalc_sigpending_tsk+0x180/0x180 [ 2213.465773] ? kasan_check_write+0x14/0x20 [ 2213.470026] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2213.475048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2213.480242] RIP: 0033:0x457569 [ 2213.483517] Code: 83 c4 18 c3 e8 d8 64 00 00 48 8b 04 24 48 8b 4c 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 2a 60 09 <01> 87 01 8b 05 22 60 09 01 83 f8 01 0f 85 8a 00 00 00 b8 01 00 00 [ 2213.502535] RSP: 002b:00007f253b2bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 2213.510293] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457569 [ 2213.518540] RDX: 0000000000000000 RSI: 00000000ffffff8c RDI: 00000000200006c0 [ 2213.525874] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 2213.533150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f253b2bf6d4 [ 2213.540467] R13: 00000000004bd325 R14: 00000000004cc388 R15: 00000000ffffffff [ 2213.547789] [ 2213.547789] Showing all locks held in the system: [ 2213.554177] 1 lock held by khungtaskd/982: [ 2213.558406] #0: 0000000004eba500 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 2213.567090] 2 locks held by rsyslogd/5216: [ 2213.571333] #0: 0000000094645969 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 2213.579381] #1: 0000000059dc5ebd (&rq->lock){-.-.}, at: __schedule+0x236/0x1ed0 [ 2213.587000] 2 locks held by getty/5306: [ 2213.590996] #0: 0000000008c44f73 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2213.599318] #1: 000000001a6a6fa9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 2213.608250] 2 locks held by getty/5307: [ 2213.612206] #0: 000000001a761015 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2213.620604] #1: 00000000e1902b39 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 2213.629536] 2 locks held by getty/5308: [ 2213.633493] #0: 00000000548a2530 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2213.641812] #1: 00000000ee9bd19f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 2213.651256] 2 locks held by getty/5309: [ 2213.655392] #0: 0000000093f82099 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2213.663656] #1: 000000007f178046 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 2213.672559] 2 locks held by getty/5310: [ 2213.676558] #0: 00000000e2680a8e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2213.684860] #1: 000000002a78c322 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 2213.693762] 2 locks held by getty/5311: [ 2213.697810] #0: 000000004f837e52 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2213.706139] #1: 000000006f780517 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 2213.715038] 2 locks held by getty/5312: [ 2213.719007] #0: 000000006f94b099 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2213.727292] #1: 00000000df352438 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 2213.736342] 2 locks held by syz-executor0/22796: [ 2213.741083] #0: 00000000c8b74aab (sb_writers#25){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 2213.749134] #1: 000000005a80e3ec (&sb->s_type->i_mutex_key#30){+.+.}, at: chmod_common+0x1b1/0x590 [ 2213.758460] 2 locks held by syz-executor0/22858: [ 2213.763214] #0: 00000000c8b74aab (sb_writers#25){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 2213.771257] #1: 000000005a80e3ec (&sb->s_type->i_mutex_key#30){+.+.}, at: chmod_common+0x1b1/0x590 [ 2213.781033] [ 2213.782649] ============================================= [ 2213.782649] [ 2213.789699] NMI backtrace for cpu 1 [ 2213.793333] CPU: 1 PID: 982 Comm: khungtaskd Not tainted 4.19.0-rc8+ #293 [ 2213.800247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2213.809591] Call Trace: [ 2213.812172] dump_stack+0x1c4/0x2b4 [ 2213.815794] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2213.820989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.826584] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 2213.831308] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 2213.836489] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 2213.841796] arch_trigger_cpumask_backtrace+0x14/0x20 [ 2213.846984] watchdog+0xb3e/0x1050 [ 2213.850520] ? reset_hung_task_detector+0xd0/0xd0 [ 2213.855349] ? __kthread_parkme+0xce/0x1a0 [ 2213.859569] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2213.864656] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2213.869744] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2213.874312] ? trace_hardirqs_on+0xbd/0x310 [ 2213.878658] ? kasan_check_read+0x11/0x20 [ 2213.882799] ? __kthread_parkme+0xce/0x1a0 [ 2213.887032] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2213.892469] ? kasan_check_write+0x14/0x20 [ 2213.896694] ? do_raw_spin_lock+0xc1/0x200 [ 2213.901038] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2213.906129] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2213.911653] ? __kthread_parkme+0xfb/0x1a0 [ 2213.915875] kthread+0x35a/0x420 [ 2213.919225] ? reset_hung_task_detector+0xd0/0xd0 [ 2213.924050] ? kthread_bind+0x40/0x40 [ 2213.927839] ret_from_fork+0x3a/0x50 [ 2213.931702] Sending NMI from CPU 1 to CPUs 0: [ 2213.937669] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.143 msecs [ 2213.938259] NMI backtrace for cpu 0 [ 2213.938266] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.0-rc8+ #293 [ 2213.938274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2213.938279] RIP: 0010:_nohz_idle_balance+0xb7/0x7a0 [ 2213.938293] Code: c7 40 14 04 f2 f2 f2 c7 40 18 f2 f2 f2 f2 c7 40 1c 04 f2 f2 f2 c7 40 20 f2 f2 f2 f2 c7 40 24 00 f2 f2 f2 c7 40 28 f2 f2 f2 f2 40 2c 00 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 [ 2213.938298] RSP: 0018:ffff8801dae077b8 EFLAGS: 00000282 [ 2213.938308] RAX: ffffed003b5c0f02 RBX: ffff8801dae2cb40 RCX: ffffffff815b4398 [ 2213.938315] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8801dae2cb40 [ 2213.938321] RBP: ffff8801dae079d8 R08: 1ffff1003b5c0f46 R09: ffffed003b5c5979 [ 2213.938327] R10: ffffed003b5c5979 R11: ffff8801dae2cbcb R12: 1ffff1003b5c0f42 [ 2213.938334] R13: ffff8801dae07ab0 R14: ffff8801dae2cb40 R15: ffff8801dae079b0 [ 2213.938341] FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 2213.938346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2213.938353] CR2: ffffffffff600400 CR3: 00000001bf49e000 CR4: 00000000001406f0 [ 2213.938359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2213.938365] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2213.938369] Call Trace: [ 2213.938372] [ 2213.938377] ? rebalance_domains+0xdc0/0xdc0 [ 2213.938381] ? find_held_lock+0x36/0x1c0 [ 2213.938386] ? rebalance_domains+0x358/0xdc0 [ 2213.938390] ? lock_downgrade+0x900/0x900 [ 2213.938395] ? check_preemption_disabled+0x48/0x200 [ 2213.938400] ? kasan_check_read+0x11/0x20 [ 2213.938405] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2213.938409] ? rcu_bh_qs+0xc0/0xc0 [ 2213.938413] ? graph_lock+0x170/0x170 [ 2213.938418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938423] ? check_preemption_disabled+0x48/0x200 [ 2213.938428] run_rebalance_domains+0x2ec/0x500 [ 2213.938433] ? _nohz_idle_balance+0x7a0/0x7a0 [ 2213.938437] ? rcu_pm_notify+0xc0/0xc0 [ 2213.938441] __do_softirq+0x30b/0xad8 [ 2213.938446] ? __irqentry_text_end+0x1f9618/0x1f9618 [ 2213.938451] ? pvclock_read_flags+0x160/0x160 [ 2213.938456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938461] ? check_preemption_disabled+0x48/0x200 [ 2213.938465] ? kvm_clock_read+0x18/0x30 [ 2213.938470] ? kvm_sched_clock_read+0x9/0x20 [ 2213.938475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938480] ? check_preemption_disabled+0x48/0x200 [ 2213.938484] irq_exit+0x17f/0x1c0 [ 2213.938488] scheduler_ipi+0x55a/0xad0 [ 2213.938493] ? migration_cpu_stop+0x6a0/0x6a0 [ 2213.938498] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2213.938503] ? check_preemption_disabled+0x48/0x200 [ 2213.938508] ? rcu_nmi_exit+0xdb/0x280 [ 2213.938512] ? rcu_idle_enter+0x4b0/0x4b0 [ 2213.938516] ? kvm_clock_read+0x18/0x30 [ 2213.938521] ? kvm_sched_clock_read+0x9/0x20 [ 2213.938526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2213.938531] ? check_preemption_disabled+0x48/0x200 [ 2213.938536] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2213.938542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938547] ? check_preemption_disabled+0x48/0x200 [ 2213.938552] smp_reschedule_interrupt+0x109/0x650 [ 2213.938556] ? smp_thermal_interrupt+0x850/0x850 [ 2213.938561] ? interrupt_entry+0xb5/0xf0 [ 2213.938566] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2213.938571] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2213.938575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2213.938580] ? trace_hardirqs_on_caller+0x310/0x310 [ 2213.938586] ? trace_hardirqs_on_caller+0x310/0x310 [ 2213.938591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938596] ? check_preemption_disabled+0x48/0x200 [ 2213.938601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2213.938605] reschedule_interrupt+0xf/0x20 [ 2213.938608] [ 2213.938613] RIP: 0010:native_safe_halt+0x6/0x10 [ 2213.938627] Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 23 d7 11 fa 48 8b 45 d8 e9 ca fe ff ff 48 89 df e8 12 d7 11 fa eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 2213.938632] RSP: 0018:ffffffff89207bb8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 2213.938643] RAX: dffffc0000000000 RBX: 1ffffffff1240f7b RCX: 0000000000000000 [ 2213.938650] RDX: 1ffffffff1263e44 RSI: 0000000000000001 RDI: ffffffff8931f220 [ 2213.938656] RBP: ffffffff89207bb8 R08: ffffffff89276e40 R09: 0000000000000000 [ 2213.938662] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89207c78 [ 2213.938669] R13: ffffffff89f3bd20 R14: 0000000000000000 R15: 0000000000000000 [ 2213.938673] default_idle+0xbf/0x490 [ 2213.938678] ? rcu_dynticks_eqs_enter+0x4c/0x70 [ 2213.938682] ? __sched_text_end+0x1/0x1 [ 2213.938686] ? rcu_idle_enter+0x329/0x4b0 [ 2213.938691] ? rcu_eqs_special_set+0x1b0/0x1b0 [ 2213.938696] ? tsc_verify_tsc_adjust+0x137/0x460 [ 2213.938701] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2213.938706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938721] arch_cpu_idle+0x10/0x20 [ 2213.938726] default_idle_call+0x6d/0x90 [ 2213.938730] do_idle+0x3db/0x5b0 [ 2213.938734] ? retint_kernel+0x2d/0x2d [ 2213.938738] ? arch_cpu_idle_exit+0x70/0x70 [ 2213.938743] cpu_startup_entry+0x10c/0x120 [ 2213.938748] ? cpu_in_idle+0x20/0x20 [ 2213.938752] rest_init+0xe2/0xe5 [ 2213.938756] start_kernel+0x8f4/0x92f [ 2213.938760] ? mem_encrypt_init+0xb/0xb [ 2213.938765] ? early_idt_handler_common+0x3b/0x60 [ 2213.938770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2213.938774] ? x86_family+0x3e/0x50 [ 2213.938780] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2213.938784] x86_64_start_reservations+0x29/0x2b [ 2213.938789] x86_64_start_kernel+0x76/0x79 [ 2213.938793] secondary_startup_64+0xa4/0xb0 [ 2213.939694] Kernel panic - not syncing: hung_task: blocked tasks [ 2214.494848] CPU: 1 PID: 982 Comm: khungtaskd Not tainted 4.19.0-rc8+ #293 [ 2214.501766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2214.511119] Call Trace: [ 2214.513713] dump_stack+0x1c4/0x2b4 [ 2214.517333] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2214.522520] panic+0x238/0x4e7 [ 2214.525707] ? add_taint.cold.5+0x16/0x16 [ 2214.529857] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 2214.535306] ? nmi_trigger_cpumask_backtrace+0x1c4/0x1ed [ 2214.540748] ? nmi_trigger_cpumask_backtrace+0x173/0x1ed [ 2214.546183] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 2214.551628] watchdog+0xb4f/0x1050 [ 2214.555160] ? reset_hung_task_detector+0xd0/0xd0 [ 2214.560000] ? __kthread_parkme+0xce/0x1a0 [ 2214.564227] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2214.569365] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2214.574466] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2214.579040] ? trace_hardirqs_on+0xbd/0x310 [ 2214.583343] ? kasan_check_read+0x11/0x20 [ 2214.587477] ? __kthread_parkme+0xce/0x1a0 [ 2214.591707] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2214.597149] ? kasan_check_write+0x14/0x20 [ 2214.601375] ? do_raw_spin_lock+0xc1/0x200 [ 2214.605602] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2214.610765] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2214.616297] ? __kthread_parkme+0xfb/0x1a0 [ 2214.620519] kthread+0x35a/0x420 [ 2214.623928] ? reset_hung_task_detector+0xd0/0xd0 [ 2214.628762] ? kthread_bind+0x40/0x40 [ 2214.632555] ret_from_fork+0x3a/0x50 [ 2214.637398] Kernel Offset: disabled [ 2214.641030] Rebooting in 86400 seconds..