fd3a9a30ef78d4337a3aaebe9bd75b23b7426deb07418fa88b01638958a727ce39b3a1fa9b7fb34254631a69726f893faed1f2283d17b811f7602309dd9bf6ea0f37990912d2e10c51a7139229969bf4908fcdfa3643e916ecb88d73ba90cd4bf10b0973e", 0xc1, 0x3, 0x0, 0x1, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, r6, &(0x7f00000001c0)="7fa6fbf5dfd97c944be412f36f0510b602f87a6bd4f3ee2eee6920444f91b31108ee3d97dd4752b5f96e51", 0x2b, 0x100000000, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x5, r7, &(0x7f0000000280)="69be433f6402b123708643ffd7747d9770e7dec7015c3b41154758d6066cdbcf2702eff674c5bfd6cf96af632293898f8f8f", 0x32, 0x1000000000000000}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0xf4, r0, &(0x7f0000000300)="5e1c92d60f63607166ca0f07fc0adb50257f279b3ea8873a19d438b54cf83f1d5bcdfe93a8320759983c05172e91e59d4c2082ee19fd55ec276c1940f28b1c15069749e4656b26d1e2436c7193e18df3dc7a834d36a75feaa1ce468e1bfb939a6d4ed042bf5152c8156a43bd", 0x6c, 0x1, 0x0, 0x3, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x8c, r9, &(0x7f0000000480), 0x0, 0x7f, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x3, r10, &(0x7f0000000500)="bd3849613b6e24be85dc0c33f99288cc200e711b87ade4aceec848fcfeb197f499b3eeeba4b88dd14998051769bf1ebeea579d5c84f86d6013b602bf667a6012f1b7c52ca34f3f2c3d65b01bc1e3dbb32fd8760155a9b352e9e5a0a7d49b9403cf47eaa0ceaaaeab5bb81767386e5698e348517775c5f28c7f4cd6857bafd35dc4653dc086bf25be9cd8a7e026db", 0x8e, 0x0, 0x0, 0x3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x1000, r11, &(0x7f0000000640)="e4e3e6b2faaab6436c49186d91af12763ee4862b9fa22ae4d0c306bae8f5ff81187ab90e0ba36f9f1527bed0bf3cb10d1ee28c8c667b1d158ae460346232da90b0f74c47651de56b7d4057a40b978cdfa9fab31e9883cbf0d53d49be87d20b61b5ca9880869e1e0d77d010ae9bb73bd94561bdc2cb1af4f5e04b2815133d007cc1b8e8f723a0fbca522f22b12b70f2917a8a17516cff90e5399131bd11021b415123c2be914d3f9b00cce429ff9d31bf061f829b12c3ad83b24df8de69685c8b1334ce2b304dc782c9010ec157ce7c6584c19d426011c04684daf48cb2110ed91acf6e3bae03", 0xe6, 0x20, 0x0, 0x3}])
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:21 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:08:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x4100}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617425028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:22 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x646300)
write$qrtrtun(r0, &(0x7f0000000080)="4139d23f00e385bc62f2d1c890ad9b95e35fce824b1b2c75c3ddeb9348f05d0e8ebf8ec0403de7324746b05c626ec561f9bae90fbe99a08180b05aa3b848bc60e65740a6c1d9f4605381089122f1a21cfead9302af4dc329be06732755d02b3922bbcb60729c5f30ba6cfd21823785ced8b69bbe37650739aa7fa60a7ff13258", 0x80)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  726.189563][ T8076] loop4: detected capacity change from 0 to 6
[  726.236826][ T8076] FAT-fs (loop4): bogus logical sector size 549
[  726.261323][ T8076] FAT-fs (loop4): Can't find a valid FAT filesystem
[  726.360067][ T8076] loop4: detected capacity change from 0 to 6
[  726.395704][ T8076] FAT-fs (loop4): bogus logical sector size 549
[  726.414627][ T8076] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x5c00}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:22 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0xa914c34e11e8d28d, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x2})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0xcc761000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x2, 0x3, &(0x7f0000000400)=[{&(0x7f0000000280)="4a26ceb52b3cc69aedbe1862e47eee363189ee83f8a183aafa400a8daabe388029ae7f71ad35387bee9071114c8d7a4f6428486566e752dafc2007880dcc2c95e821d109116574fd00953c5baac9aee1dc5188acf18cfc253283583e7390af5f068d3286146c2dec30b43e5ef71292dbe295b69a78460709bf9dfd9e7ff3439f9f59a5b73047c61a21c1b10b51b6ee8848bda4e0cb31805f7f97cae96acbbd49000c43cf73e94b699042e4c1e83c680e756c586d693b2ee9f502c05fc5909b573afe20ec4ead16171a27ba40d76f152e652200d72e3a7b4f340a89676fb5ea5728af4f69b0c74537b3f4", 0xea, 0x101}, {&(0x7f0000000380), 0x0, 0x2}, {&(0x7f00000003c0)="9885d9200dc745b098f6", 0xa, 0x6}], 0x1044026, &(0x7f0000000480)={[{}, {@noinit_itable}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}}, {@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@dioread_lock}], [{@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]})
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x5c87096791b10941, 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000540), 0x840, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@cachetag={'cachetag', 0x3d, 'max_batch_time'}}, {@cachetag={'cachetag', 0x3d, 'fscontext'}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@smackfshat}]}})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000740)={0x550, 0x400, 0xf00, 0x280, 0x1, 0x3, 0x1, 0x2, {0x1, 0xfffffff7, 0x1}, {0xffff, 0x6}, {0x0, 0xe4}, {0xfffff000, 0x88b, 0x1}, 0x2, 0x100, 0x2, 0x800, 0x0, 0x0, 0x35, 0x101, 0x0, 0xfffffff9, 0x8, 0x9, 0x1, 0x100, 0x3, 0xc})
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000680)={0x20, 0x40, 0x320, 0x2000, 0xf0, 0x6, 0xf, 0x0, {0x48ad, 0x40000058}, {0x0, 0x60c, 0x1}, {0x3f, 0x4258}, {0x1}, 0x1, 0x100, 0x3, 0x80b1d, 0x1, 0x6a48, 0x8a23, 0x6, 0xad35, 0x6, 0x6f, 0x6, 0x10, 0x100, 0x0, 0x5})
write$qrtrtun(r1, &(0x7f00000001c0)="be47a1d5bbd1812df1f0f98f82d9af04f5fec94c220810b0f9c44f3a944b6a0608edd0de59f089938d59e30427e6bb48c0c397b73a34a12c5442dbf9ecbb1db80ea71121f5c480a414afe1808f81686e9dee6834d4b11bd32aa1a8bb", 0x5c)
ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000900)={0x41, 0x8, &(0x7f0000000800)=[0xffe0, 0x1000, 0x100, 0x3, 0x3, 0x2, 0x4, 0x9], &(0x7f0000000840)=[0x8, 0x6, 0x14, 0x3], &(0x7f0000000880)=[0x1000, 0xff, 0xfff, 0x0, 0x7, 0x0, 0x4], &(0x7f00000008c0)=[0x9, 0x20, 0x4, 0x6]})
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
sendfile(r3, r5, &(0x7f0000000940)=0x7b, 0x401)

14:08:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$vcsa(&(0x7f0000000000), 0x100000000, 0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfb, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4], 0xf000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="0f01cf0f205966b8bbde00000f23d80f21f86635800000a00f23f80f2306f46766c744240040e900006766c7442402cad800006766c744240600000000670f011424baf80c66b82243e48366efbafc0ced660f38811a660f383cf4f30fc77199", 0x60}], 0x1, 0x5, &(0x7f0000000300), 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000004c0)={"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"})
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14:08:22 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001340), 0x608302)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x7fffffff, 0x8}, {0x8}, {0x0, 0x0, 0x2000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe})
preadv(r1, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/227, 0xe3}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/18, 0x12}, {&(0x7f00000011c0)=""/198, 0xc6}], 0x4, 0x3, 0x1)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
write(r2, &(0x7f0000001380)="2f9f1f1b603ae07552e9179b26071a4a68f8ec38bd886f320ab86c5c257e725d0a914fd311d4049e0a203f61e62b911e306da766faaeead1992f069055975c6b76e4a0fcabe3991e9a2abc7388f69bba501a4ad4fc485e4dd09f3e80152f2703d89d6090ec50942eb939e4cdcc9964d45bad0ccaf673be7c61cfdf3bd2ea672f79e6f038ba360b3ce193aeafaa6b8d266d350f56abab4e46985d2f3de755658549961f148ac3e9cc2f0cd9ed4fa26dc0d760299d8fb95e74", 0xb8)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000001300))

14:08:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617436028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}]}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r4, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x56}, @void, @val={0xc, 0x99, {0x8, 0x16}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ee2dcf20fd35aad5c48412dc1a7df8af1c049922e88ad0f"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "100f9ed77e04cccfd41055de28c524a608d6cba66fe219f4"}]]}, 0x9c}}, 0x8000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  726.762266][ T8109] loop0: detected capacity change from 0 to 1
[  726.792541][ T8119] loop4: detected capacity change from 0 to 6
[  726.823208][ T8111] kvm_mmu_after_set_cpuid: 16 callbacks suppressed
[  726.823225][ T8111] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  726.847776][ T8109] 9pnet: Insufficient options for proto=fd
[  726.849450][ T8120] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:22 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000000c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/245, 0xf5}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f00000005c0)=""/21, 0x15}], 0x8, 0x8, 0x3f)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000680))
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  726.885747][ T8119] FAT-fs (loop4): bogus logical sector size 566
[  726.916343][ T8131] loop0: detected capacity change from 0 to 1
[  726.931863][ T8119] FAT-fs (loop4): Can't find a valid FAT filesystem
[  727.003540][ T8119] loop4: detected capacity change from 0 to 6
[  727.035192][ T8155] 9pnet: Insufficient options for proto=fd
[  727.041635][ T8119] FAT-fs (loop4): bogus logical sector size 566
14:08:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xff00}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  727.066631][ T8119] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:23 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x424882)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000400), 0x0, 0xd9f, 0x0)
close(r0)
write$qrtrtun(r0, &(0x7f0000000040)="0370b2b0648f91dde282053821299dfe0ce9c348ff68b3b0b1045444dbf8e8d943176ed7b98eba1f1121cb49b89f379d4908291eaa8090a89967249df5c7", 0xfffffc57)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1fd, 0x2, 0xe139dd6037ce8fb, 0x2000, &(0x7f000061a000/0x2000)=nil})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x82880ab8251e5417, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xc4, 0x0, 0x1}, 0x7)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x4080, 0x0)

14:08:23 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000000)={r0})
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:08:23 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x130663cd2d70410c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617441028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:23 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$qrtrtun(r0, &(0x7f0000000080)="3ed5fcd245bad0cbfe935c719caadab7a5f8", 0x12)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x5, 0x10, 0x5}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  727.274578][ T8164] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  727.281742][ T8170] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  727.300436][ T8164] kvm_mmu_after_set_cpuid: 13 callbacks suppressed
[  727.300452][ T8164] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  727.343212][ T8170] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  727.372972][ T8182] loop4: detected capacity change from 0 to 6
[  727.443961][ T8182] FAT-fs (loop4): bogus logical sector size 577
14:08:23 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="727f3e04446c6840aee3fed85ba8325f0b2cd0687219d6c882a4dfcd83433c73f027171c1a968d49433401c4", 0x2c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400100, 0x0)
write$qrtrtun(r2, &(0x7f0000000100)="066fb5345de5ed27d34ab6d7650b4619caa1912dbc0b6ab69aced2ca284e55f404c0eb2736f19423aeb67d30a18b398db6bce3527cfacb62936179de8cbe883e88749c02dad4eba1dffd50652adaae751afbf9461f3a05d9d44c80862d3fd6a506a5188fe7ea4a0547847eb07f66d14ffbc3a6186b5a02d2b89bf2a8b8e9bf60f4add6eed198bace92b40b2e591fa0bd08419bd389418211cf", 0x99)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x4000010, r1, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x6cf8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x5}}, 0x0, 0x0, 0x7, 0x0, "f406af8e3e26b769fc2f0f52711cfd40b79c642e440584730570decd1b6811f13fe5f914515daa2e1ad8c77c67d448c1849e54a5c8ef0374bb1fa0932a353fb5cfbe1106ce14dddc494a45b5fa5e1b8d"}, 0xd8)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000300)="15da9a6a978f80eedb3f54441fffb1c16ae42705eb74a8c7502fea44b20dcc710ed95747f9d5c02757539b45ee0dadc143509d6d13969ed81930b7b809a31b4c653d08c9ec2819d23c3f329c1aec6e5c1b1979ef7e1fc4bdcedb24d6711da317acc2bf334e86956c66d090bccac69d93f8d6efa7a2426615db1dca59aa2fe89a004da05108e9fdd34a8cb772a956c39c451dac949fc9a423e1927da9fadd5be8c7395585ecc8bf2381ef58cb31dca8c5093e9b6785ee92839320aaaa120e2acdc430", 0xc2)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r4 = syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000480)="5e0cc84037ce67dd076065b5c5c7a4a2c36857c892f8af2247ee9db6a15a1e5f1cef1e2d3dc6f51db136e644dfd97c5d48b6ec37e7e339247cbb9cdb2a830fa0d01d7822afd5f18aa4d7610eaf370663472aa034a0bcc4b1bc523fef8ac8e880575158c34890151ac6bb698aa2980558eeaa9dc7c903e26e", 0x78}, {&(0x7f0000000500)="92ae97e54f01be94f806ad065d4c326adeffaa5cbf8215fd27ea0efdfcaf68", 0x1f, 0x6}, {&(0x7f0000000540)="df795d1de678e86dbbf4acb244f435301f7ffe1fb8da39f896f1a522ccab297c3837c6647e5e2a99d1b8814f41b5abed9dd268afa58c86c7651cc3e20cb4ee774f3f718d89e66d81d92de9130373ea0c235df13ae9ced448b21ef0c093ceba754b596377e475e203fab09ee9b9289499fb00", 0x72, 0x8}, {&(0x7f00000005c0)="d6f67ea479b0c502ecb5d2d52dc36e0b564d6f6f613b2b7e7e9181df7becc952deec3b15d15449d8221e1d900dfa86599ee8674d844d6a715a90df499f511123f22504da54d674558b83c3c32153cd671133c50d4bb7ded53b0786f29c00c614ab729097c560dca49d4c0539d514920fe363b1ae48a7b9e6e699e37b56cead7b1caf910c77cecd5c6c4420c0ce24530304a405bca491e3c27de671b48551019d72acb55560419b6d2749ea48d1ad7538c98dbf0f3b084495b2274583421cf874f58ef26ce4cd58af5d06b6353af9ec97f5d98da9a947e64e3f", 0xd9, 0xff}], 0x1180400, &(0x7f0000000740)={[{@quota_off}], [{@euid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\'-/\\)%\'\\'}}, {@uid_lt={'uid<', 0xee01}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fscontext={'fscontext', 0x3d, 'root'}}]})
readlinkat(r4, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=""/4096, 0x1000)

14:08:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x18100}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  727.485409][ T8182] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:23 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  727.611655][ T8182] loop4: detected capacity change from 0 to 6
[  727.622817][ T8182] FAT-fs (loop4): bogus logical sector size 577
[  727.640531][ T8182] FAT-fs (loop4): Can't find a valid FAT filesystem
[  727.649995][ T8201] qrtr: Invalid version 114
[  727.775817][ T8201] qrtr: Invalid version 114
14:08:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617448028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x200000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:23 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x226c42, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  727.914386][ T8217] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  727.975069][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.994083][ T8217] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  728.060309][ T8230] loop4: detected capacity change from 0 to 6
[  728.078181][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.097139][ T8229] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:24 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  728.126860][ T8229] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  728.145562][ T8230] FAT-fs (loop4): bogus logical sector size 584
14:08:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x300000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  728.253884][ T8230] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:24 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r4 = syz_mount_image$vxfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f0000000d80)="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", 0x1000}], 0x800000, &(0x7f0000000240)={[{'&'}, {'/dev/qrtr-tun\x00'}, {')--+-@!\\,{%,#{^]'}, {'/dev/fb1\x00'}, {'/dev/fb1\x00'}, {'\x00'}, {'\x00'}], [{@subj_role={'subj_role', 0x3d, '/dev/fb1\x00'}}, {@pcr={'pcr', 0x3d, 0x8}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000080)={0x2, 0x1, 0x2})
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f00000000c0)="035e3cc78f4e6353f4394f2b67e255d74815b332ea614caea5d05d481c2660ab5cce8cb85db73d4b56cc88791c2e6a59e267d45edf38107a8c5d4540d2a337595c6d616b216a7c17c69b4e7302af2e3b002b2113fd0779c614addc49c38ef9752bdd212fe98b8477c905d368a7525c4c592b298bbee52a144ef8cfb325bc5afbb537a111c5739f5bbbb51dc527b71b7a12d96f1f123eeead", 0x98)

[  728.354903][ T8250] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  728.367581][ T8230] loop4: detected capacity change from 0 to 6
[  728.392292][ T8250] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  728.397918][ T8230] FAT-fs (loop4): bogus logical sector size 584
[  728.448115][ T8259] loop0: detected capacity change from 0 to 8
[  728.460700][ T8230] FAT-fs (loop4): Can't find a valid FAT filesystem
[  728.490370][ T8260] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  728.500331][ T8259] vxfs: WRONG superblock magic 356a628e at 1
[  728.522628][ T8260] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:24 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:08:24 executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/raw6\x00')
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x98400, 0x0)
dup(r0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r1, &(0x7f0000000100)='\x00\x00\x00,', 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000)

[  728.537523][ T8259] vxfs: unable to read disk superblock at 8
14:08:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661744c028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  728.571024][ T8259] vxfs: can't find superblock.
14:08:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x80ffff}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  728.658191][ T8272] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  728.670223][ T8279] loop0: detected capacity change from 0 to 8
[  728.680871][ T8280] qrtr: Invalid version 0
[  728.686469][ T8272] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  728.711664][ T8279] vxfs: WRONG superblock magic 356a628e at 1
[  728.714171][ T8283] qrtr: Invalid version 0
[  728.722866][ T8281] loop4: detected capacity change from 0 to 6
[  728.723865][ T8279] vxfs: unable to read disk superblock at 8
[  728.775980][ T8279] vxfs: can't find superblock.
[  728.783872][ T8281] FAT-fs (loop4): bogus logical sector size 588
[  728.813353][ T8281] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:24 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x22280, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
splice(r1, &(0x7f0000000080)=0x100000000, r2, &(0x7f00000000c0)=0x9, 0x0, 0xa)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:24 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$qrtrtun(r0, &(0x7f0000000080)="3ed5fcd245bad0cbfe935c719caadab7a5f8", 0x12)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x5, 0x10, 0x5}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  728.843759][ T8290] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:24 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/249, 0xf9}], 0x7, 0x3, 0x100)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002740), 0x80000, 0x0)
read$qrtrtun(r1, &(0x7f0000002780)=""/134, 0x86)
read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000002600)={{0x1, 0x5, 0x535, 0x0, '\x00', 0x1}, 0x0, 0x10000000, 0x278, r2, 0x4, 0x7, 'syz1\x00', &(0x7f00000025c0)=['}-+.\x00', '\x00', '#^@-]){\x00', '@^\x00'], 0x11, '\x00', [0x5, 0x62f, 0x8, 0x23bd]})

[  728.898802][ T8290] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  728.908460][ T8281] loop4: detected capacity change from 0 to 6
[  728.961736][ T8281] FAT-fs (loop4): bogus logical sector size 588
[  729.004240][ T8281] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:24 executing program 0:
exit_group(0xba)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x10001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x9}}, &(0x7f0000000200)='GPL\x00', 0x6, 0xbd, &(0x7f0000000240)=""/189, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
write$qrtrtun(r1, &(0x7f0000000280)="d7c00d685c3ef232591ee68af8a0684e683a9b0afb537e975bd6d64914ae6ff3a0fbd503649bbe81aa02b25995633c952613f4157fb6d2b2946bb993aea6f73678e313571441cb69c0549e6a591b0d641396302d93cf7648515217c130557fa922971ba1c111b08ead573be51f8f1cda892e979e96b2ba6120e327e1796972e320538b", 0x83)
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/143, 0x8f}, {&(0x7f0000000140)=""/167, 0xa7}], 0x2, 0x9, 0x800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}]}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1000}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x810100}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661745c028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:25 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x2a)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000006c00), 0x80, 0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', '.', [{}, {0x20, '\\\'$}'}, {0x20, '/proc/self/net/pfkey\x00'}, {0x20, 'F}z'}, {0x20, '^\'-!{\xac\"&$\f}++#'}, {0x20, '/proc/self/net/pfkey\x00'}, {0x20, '.]-\\)\\@{:)-\''}, {0x20, '}'}], 0xa, "7e42894aa89bb11148be5b6ec4685a64835764d52745603574b915a4e84d51548bcb0a3d33a585bd909fcbf2768890d46f5df08d377d2c75f9789dbb2bcd4227adcaeef5566f5ccf67c5ea6046ca61e53f2e693cb577827545737b62f06c357c0c78"}, 0xbb)
fallocate(r0, 0x45, 0x2, 0xae)
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
read$fb(r4, &(0x7f0000000280)=""/4096, 0x1000)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000006d00)={&(0x7f0000006c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006cc0)={&(0x7f0000006c80)=ANY=[@ANYBLOB="100000000a14010000007000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004000)
r5 = signalfd(r0, &(0x7f0000000080)={[0x6]}, 0x8)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001280), 0x800, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000012c0)={0x320, 0xaaaf020163891339, 0x578, 0x80, 0x2, 0x69, 0x1f, 0x2, {0x8, 0x30}, {0xa8d, 0x4, 0x1}, {0x10000, 0xcbe, 0x1}, {0x9, 0x2}, 0x2, 0x40, 0xbed, 0x80000001, 0x0, 0x7ddcdd65, 0xffffff80, 0x43, 0xfffffc00, 0x6, 0x5, 0x2, 0x21, 0x200, 0x0, 0xa})
write$qrtrtun(r5, &(0x7f00000000c0)="2e037d9e50eadbc30c9b067d4dec240fe186a3d466ff4b31e562481f6a7e45a78c0cba9ef738a6ec9a6532b1c79387eba37325d40db83c97481f055ec72a1c2cc22e6fda97bb019b4deba0d53ad5a7ace98cc0d9347f871b681dab88e090fc8bdcd774b18b32679a3a011d3c88bdad83ac22c260a6cc5d52048c3e33b45b13d34af89ec9d7fad98d38842250731c3ffc0b4eb868995b61f2b040546a4b0c9fd248087d76f771dce0c299e740d66734aeb721e3fc698819e63adea9ae79b6e40fc76acfd7d4", 0xc5)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  729.411822][ T8320] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  729.442689][ T8324] loop4: detected capacity change from 0 to 6
14:08:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  729.534022][ T8324] FAT-fs (loop4): bogus logical sector size 604
[  729.536601][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.565798][ T8324] FAT-fs (loop4): Can't find a valid FAT filesystem
[  729.637355][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.680903][ T8324] loop4: detected capacity change from 0 to 6
[  729.714050][ T8324] FAT-fs (loop4): bogus logical sector size 604
[  729.739416][ T8324] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617460028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:25 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x312882)
write$qrtrtun(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)

14:08:25 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x181081)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000)

14:08:25 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1000040}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  730.115514][ T8356] loop4: detected capacity change from 0 to 6
14:08:26 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltclass={0xbc, 0x29, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0x4, 0xfff3}, {0xffff, 0x2}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xd87}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0xde}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @tclass_kind_options=@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x8b}}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:26 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  730.160704][ T8356] FAT-fs (loop4): bogus logical sector size 608
[  730.206099][ T8356] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:26 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
io_setup(0x6, &(0x7f0000000080)=<r1=>0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000011c0), 0x82081, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001240)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/66, 0x42}], 0x1, &(0x7f0000001380)=""/254, 0xfe}, 0x10160)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r6 = perf_event_open(&(0x7f0000001680)={0x0, 0x80, 0x9, 0xc5, 0x5, 0x1, 0x0, 0x6, 0x4d1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8f8, 0x1, @perf_config_ext={0x5}, 0x1004, 0x1, 0xffffa045, 0x8, 0xfff, 0x3f, 0xffff, 0x0, 0x20, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x3)
r7 = fsmount(0xffffffffffffffff, 0x1, 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0)
preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
io_submit(r1, 0x6, &(0x7f0000002880)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f00000000c0)="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", 0x1000, 0x2, 0x0, 0x3}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0xc, 0xff, r0, &(0x7f0000001100)="ba9173b0b819596fe2388c6f686d39fa35b837389754548815a27b5d8f0a4cd483a7458ef6e3637c14fcd2a4ae0cc8391f4c5007a76e34c1bdf906e683e2c1561694a6344525c1c3461071b0f23f32ddd1889b50923d3f371487e114af9e4f3284e6267b9801506cbdc7bb01ef46d0da0cf706fb7813d7532067473548763059ff175977e2dc239092199240e89adc4b1f3a5a84e6c370b3671ca7c43e627e45db6a768c1f57723967b7cf8f374dabb80a708cfa7c7f4d0ed917ce19", 0xbc, 0x9, 0x0, 0x1, r3}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f00000014c0)="7bd2553ce45818d419485939bd8ed2b642f7abf71b2d91c788158aa5ae2d68269a92cfdbb11efbd8697abcec7cdfeba2f0b62b94ae77541b19c7860e6fba000cad1724c5e7430ab4b678a7efcbf5c8271bb1ebd37cc60fbd310f83b870db1efec6fca389124a27850a4f9f8d551f", 0x6e, 0x1ff, 0x0, 0x3}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000001580)="1189f14a3e331b12541012a7b1483865cccc4136cab04d4d16d6c9edfb0f566d09d45e9c2368d51f41bbe6bb15b549ff12c06ed1098e221c09741e5fe16cdd13bdd70229a122021f5b22aec743783af9b705f44347262eb01c3b5ad262d56d61acc5516e304f22afcb3b8ee08e18b8a83137404c668d6b3cb1b9ff039756f7505fc6fa734c4988e79849c11775ebe49fac7973d69dbf89794743d45b46c63f04023086875b", 0xa5, 0x3, 0x0, 0x1}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x3, 0x40, r6, &(0x7f0000001700)="5eae5bd8d4800fa8ffc3f9d3d7a897f4bc446d30c3596308eff3f1a50f04fb9ac166d79d3a3c04a54c57ba49c46d7c6d4d0f0da186efc7376dc3a93d603d67d179cd2279c58ad84636cd36fe1f748a95dd7cd0ac1680bbcdf85714eb881a4b5fc1ff8a35e6c0a6685a6e9d9e23647afd68478f552c73f1ce18aa46a007a3d46585ce53f7dfa3002355fd7f787a51d953285fcae93a4839be80f1e9b09cef4f2366d9fa093fa36b22d1b1d9f1f12b71388eb7013b6aaa8e2757c3a2281f09808873be1761a51a9ab591a99fcf91a22651647011fc0ba9094e7fea28fb077bcfa08a85ad80ad93374e34fe69c099258881faae6486f13216abef8d3a23906c2e9dbd9916d6551d14425f9810f06116f19d34ce09491c178a1ccbe319400bd9e2251e7037abee254a0aae2ddd64c2f5be1eb436b78b0b4f888bc0c91cd77f8cc8ae40e69e0ddab1fa2053861b43b0785efedff566393315c69cd288d3403f29fcc6234e8a3b73f57e1b6f6b29233b144030a57a015a753b11663d20903c16f703a34ce509b4a4fa7389f718378a61c793b03dc060c2bdd1c9bbb2a2d4bb9d436214ed0ac5fd57f169c6e5706aad8ef2dcf0127857e48f6641f3035a1ff46cdcd44af6da54520f2f4d1b0f165e68e8c7b74cb3c97bb9426d4de96ec6aab6af2dc690d806842a86adeea165ceb1aaea7e1c582c62762e3c04295a4697d8dc89a07cff37ce8ba3d867d0da4a80564c53ba1af241d1f5a9897366fccbba3ecf770701eed8931a28da2253a0ea7f24560baa32e14b430ca98fe7dca0278aa1128743ffedf4864a63056fe061f1574ae277680e9b0ab65d65e737462879a73a8fcec054bcad3bcd3bba42bdc65fcb5baae9d61eb80a907e4e95d7fd6d0f6010392736af02967d183b9679e15ebdf76954a9926550b35a878fa46c32e04ca05697c8c9980d7d6039264c9618ff89e9a1f33027d84090bdb7dc7e13be621efa5cf2c7da529eef9cae3da435ce9c62a0f94259e6d93d91853081c500fe65c655b6660cbc2c3c1b07c05a5c4391a3e6ee3f25078981eef0a2efbf72bf6c6e934f7f4d993aa28231266cb6d1a826fa0c2089c908fbd80bb6380af64e678f289eeca97556d3438eb159339ac32329f8a56a8acf729d58655fe99026d1e471d38a127b2bd1db4bbc67f8c4ba3cc635119e914a3b3810c5f99c580d3b951b1bd0ee2b7adb4fa605cb34208cb383fc7aa5c18a989ca5bf5d888bb684ea52445f88aa790b6783cbfb3d29413c6c73e0e1ac9becc5d32fe65564394e08248a1f05a228dacee9e17241a536516761419e8c856768e3070f26c87802e3996d3c1332ea885c2ae01c2cedfb8e1bf92bd1fc2e2dcd471e9806080af818f0f72379b59c0cbcf2dd0f3a5c8a26239b3ad57b388af67efde0182da06c6afd7bc97d2b25fe4345baaadc686a9d6ef9b5a046b0dc8652dffdfc0e40762ab4fb890bfc1c139c2a552b14f5a6dd45cfe60b8b19269b839e3ffc55913c0d20f7572c127608110c98be50213afd382e316be41416d3bf85d6a23bbc66aaee33771fde2700bf65217ca9766dd4dbb40ffcc727fce6a366f565514578cd956998479d2ac91626e9f84560ff5910a3a6ae351ca6df5f0da5e44908cecf1711b6ad478135ebcb54508009363cff4c172ed34aeb84b10d936b81f7f972bd4651ef0e4b5b94b64f9987c7052da1f7b2c763e376b3d01f54aff9da92b6e40713b73be5f78c0c698e02cf6a3d8ede8046cfb60ba175312b8e9d5b145a03254786a29fad3d80aa2adf41ad19d697d494a8e2c6adeaca37a215134325882de7aeda0341aa2e2cb1911f596f3fa44c3befc4e893141a51a9c7af32ebaffecb4e6e6ddb801ad755168c511a240149f4f562614e694a3bfe17866eb999b4f386fe7629c37e271ed45ba387d63f2d1825218956a04c71659e8c94f8a9e5602d9c324076cfb4c0c535d11e4a4d328f9351fabacea1d9f74aa0d1c58d3950e19eb0ebcfcbadfc0b0d1facccb1437e796f5b84faa1f35d73154045f0279289611e9a8177375cdc276fa2f8c04629ae3b6f23734d0cec57ba426ce847394b132d888fc53e9c7224eb6f2d38bb71980e82840cc14b8adeb2780e39c979dd6ee47c052a53b2af2c241a45ef7e55b6aea3fd3c35d20f28f9e345e48ee70c6c7dcd33803f7adba4cfaa3eb0ce64a4de29462eade457c7cb07f13d384925dc631b889c0ceb6bd4f6cdf38b2d0a48cc4065cff76bf1a85da8ca65a63d728feb078aa41b7f46d40e9002bbd447b7c795b294b8ddfaae31dadf9361ec21d474a253635c910c15222fcacccb016ceea989b10b4510b559b128e7531583a6d0c0eb44e6d0d0ce90a78cf7dcc1d04e76b247cd9e46e8a0efd225cc03dc2d77f233c39f70c8551baa18eaa48f26d493f36746af8db4060a95085552ec6cd8ef979fde63ac1e148db49b41e375859e586c36fe6e2344598d88e8d6e242205a07150c97c8177d588b52dbd95d418cf9f9442495cd2defeeb341299fc9de006e05c9a18be9222f9bf7aef2196017072ea1784437a5f345d36022362da307b320f181edb853d803d9e491ec6a7e06ece9ca45b3b4df3386c62beb6cb1a3acd894015e36d66a9c792afb91382fff4878a226e79d6e2db5a37bb254db7df056b0a69e7e59dda9f6b9400ae15c0bde203e8f18d26693fcc2a200de4805e6185de1e55215b559bb9dbb44db03c81f04676decd8bd5d110669e719c4c4f309da6127fdce66fd200166523a6f9e66fbe94a2bfb01d395ba99df9ee07b3d346f8af1008c731f885fef95ede2a33dd67f2506ac320dc1b6e92c953bb266876f6ae3bc6dcf3e2932c338be05e30a7857b483df4e2e79b4e1beda4790edb40f4c7cccbab4a1393f344c27578f0e8934b961fca5056f11fe89e7b5985e9fbe6afcfe05b8d24a9b89bf7e82b920ce632660d29fc8f3224e293c5f51625a88e5a6dd7649317ffb2293bf9023c4af8bf17e9d1cddc8c71e847fb4ed840d9ab55fcea06128e38d5c310ef309ecfae823ba2d30804c9a94607403223806f024672561a82712d05e76d93eafc9af855fafec491dfbb30be80ef09ae2f6be8b952735846170e96a0dab5f68a9659baa84676099d2830b95356eb495fbb0b4ba444de9a079458f4a364ccf7676e91ef571abf69d6cfe3c55f36c7b1ca83a6b35a5a33b5465bdd33a8a5303cdacfacffd660a430d146747a58dbc46f071ff617fa6a5d3dc9d23b7600dc620ac78812ea29cac97ccf9f10cf38f4795a185e4d9db5d9aa492890c4d697df407b0dced94d4aceb545aacdf748a562ab7d1882da2c712ae574bfc4315bf22fb375bc10576cfbae5dac17f3bb8d52b783f47298cbe12b363cd1a1e66fadd37cde7260b9d0fb4a9916451e701792f122ed4764699fc32ce4846f15ad487ffbb86e262bc76100ac909f912cc272effb928bc8cf28efd354c8b9a59fbc0a88ca0ea6d27714c9237b591b96eb361b9620c3493fcd7d61a3f2636bc3c16c2dabb3cd3ed0e73a4a66efb4e2e45ac5865cdda4f1e350a72acc0f64ff4fc84855b1d3b4582317564d7277981a7037369244127621160dfb264b7172bce3616eec86ea25b2244117266b4b9154439d7876de25c0f9ab5671161cd8318e9cc3c84e30d7f02671e007479c7bd00d77a11ae13fa9b8ab5bd9a0882d0861273c4c5909ce15a9553e994c1eca7aa1d26ae00802264ee9cb019199b4c07bc6ef5273e4cf66c7765b7749350e34e203c97867b1b0c004d48cb710dc0356e5367fc6050edba4b79adb894f4c8521d01316fa7c4f99c7b2209b01ec10ed86b92afb0d6891559adfadcbc7b1d1553adc13d093875d98870aa25692114f65a2ded15605acfdb4446be3e438706c4d10363e164ecbc635d6e1cb0d710477995cbd521b0d76dbe28c444b48dcdffbaf80b70e29911f73790442c2be0642734ef6d4eae0508745dd332ec86cabac57b5de91f77c4a0ba2184fddd57f11ef4c52caa01a2b6be7e66d1a42f2b85109f8507d2797ab556ca78d9d679fb1e0f586ca91f6af9553d38e5e99d4e9e5862b86a05e9daca1f872b0c35299ea085c4e8f640924d7ef9c4d2b7e02f2b0f49289b473ee8b3543bee194a3f85b40d063d596d2c41e8c4ce2193c98489f555f9a75ea294e159a7c2a83fc4781075307e41c2979065cb587d6beadab9bf775a64712338de93516d70301241eb84263a23e508dc2806108e57289f70b6bf3d924b75bf24aa03be5166475b480a567593b4892003f69f4ca9d2bec0446219f5ff13948658845ed5ce337dff9bbde2ed0041805cfcef44970b3b94d1a0c4312e9a5352b1ba6ca5fe071cb86a2dbfe0667f83a191e0ba8320dbb4da6394ddc0d1ca6664c39b3427f930e86217e433acf44d618f834b46fe226e763adb2695151bfc2c9474309322a111fdc8a75d2610ff5fff38151d211c14a9003576f37bd784c1e497374eaafaa892b7d04b409a3d3ec5c4b03afc15c1009d207772fc57bf871b2b07b1d234ea42c03fe0cfa6c32014ab1394b0e1731bf4cd6c8738dca6d2a6c9191202ae3f3b82f2077deb0c3ea85b27737d0c703f9b014694ae7c08ad62eaddaeb736ec2b4843a715d343ab71040808035935f492fd6bbab1b635169384032d27a9527320f8d0bb5096b85dbf8523a51dd4a25fc3160d85a5bc925848b8bea97c5f95b0aab181a043b16d5a106e5798bc67480ce759ba5e61ec94af747e1eaa06896563e31d6484c8703dc002fa71a8dbadde58660949aa0755213fa87760811b61497b56b6e1bb7f6e726c6bc241fc6054c8649de2d1a61a71267b8f1296ca1ac5b372064094d849ba57faf0582f76e0d95d64f9ac9c5f5135371de4c968c4d6633642cf8f3cb6f3ebf04cd2d1baa62b84745bf29fe497fd77c6b84311be6c0dccfeb6ca4ee5135497946e0544732c8e020842418db97cb7d935cc3c6ab7a5500fc54a58f3ef3d35adf9bc8e6270f01a0724632d130d11c8a89cc835665a02b061fccad6eca52e63f17bad2709b4826eea40e2d9ec504d263b70711c37df8816410d80f215837eb5b8fd7edc6ef2e28f843bbdb6ba3fd9c9e322241a4e00a20d7b8cf210a6ab21a6bd349e06e911d333278c5c032fc7374288b4a0daf8f9843c610562b73cd87c2706f1de229578a101785e39bfeec21d50510f369d9a5c944e120f35099ce9ed5f859fe55cf692196caca56df6261c48b3ad4e34bbc12395dba374918cf2dc85c1681a6bc9d917ca5459af7c40f1fdb3f0ce118661eecde73b9fb4077e94b0e160a4d4ecc94371bea523e920d3def7e649ca8a10468a0558c3c651b33dea1f704d0319cf097a307b558a0bdb0c599110b5a7aa507b157d9bf8ccda584d70d34cf2984e60e849126d9661436fe6cab912b69ccd2180cdd3ce947199801d5cde58cb1147af1a785e520623b14d1bf35c182c32c0abe0c64ca09ac6706606f96254ac0d8e9329225604fb43701ef07b605dd8dbd3c8230a17387c859aac54d4ea17cefae67425fd9d1659dfc0c979c5c17e38ba5e3a96e13ff400972808ea408f06cebeac20a5f43218fc971ef78ec4fa4bd9f33413637aa098a3d20f898b5baae4b9f06d512e2c6afe42b9fcdb9ad59de3dbe2a8c2e32a5b332b9ed5053321ad7d21633a7c48a3ea2e3b040352e9503bcb52862064fe5f0e8b835895ef6168b740a1a0c57b687500e631202a4a5fda4970a68420fe99723f06df8cccdb6a491084fba5f37c2236bca8206c28cdf73107d1c4b8519272a7b62039", 0x1000, 0x1a78, 0x0, 0x5, r7}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000002740)="c3fa83240766f80e460b96aac34e5389fad2d88c8623bc687398a52211523e6c02ab0585b458665fb3defc43773636383ba989c4cf793c55dfc32a1a58e9f1e3c66ea697409388892e9d3ae6a1090e923afd754dd4bf2f2e13b95292ed6d6d91484a27b0a760471cb4177351c4eaccc1ca585bcc5dab89d795f4f53efdce3099d816a43739404b390deed33d9a51f26c7c5a90797a3729c68c157db16aeef0d5803c8c0adb89a5b1b63d3c5f0bd8c0efead8b13d93608f080dcc68fc01530d2b556af01ef847d473a761a812687698a51ad6e3655b", 0xd5, 0x5, 0x0, 0x2, r8}])

14:08:26 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
write$qrtrtun(r0, &(0x7f0000000080)="2b7b53d53dd4218c89742a8d07358f776b56b495", 0x14)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00')
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delchain={0x34, 0x65, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1e}, {0xffff, 0xfff3}, {0x2, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x81, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x4800)

[  730.297510][ T8356] loop4: detected capacity change from 0 to 6
[  730.300567][ T8363] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  730.316362][ T8356] FAT-fs (loop4): bogus logical sector size 608
14:08:26 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  730.356549][ T8356] FAT-fs (loop4): Can't find a valid FAT filesystem
[  730.424884][ T8383] qrtr: Invalid version 43
[  730.465651][ T8389] qrtr: Invalid version 43
14:08:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617468028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:26 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0xc)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FIONCLEX(r2, 0x5450)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:26 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:26 executing program 1:
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000004c0)={0x5, 0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000480)={0x3, 0x3, 0x4, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
ftruncate(r4, 0x10001)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000080)={"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"})
write$qrtrtun(r4, &(0x7f0000000040)="03212139", 0x4)

[  730.662363][ T8401] loop4: detected capacity change from 0 to 6
14:08:26 executing program 5:
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="03212139", 0x400000)

14:08:26 executing program 0:
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, 0x1, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CT={0xb4, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x18, 0x17, [0x6, 0x0, 0x1, 0x20, 0x0]}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x6, 0x7, 0x8, 0x8]}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1ff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x40}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x81}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x14}]}]}, 0x108}, 0x1, 0x0, 0x0, 0xc001}, 0x20000010)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000280))
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  730.714461][ T8401] FAT-fs (loop4): bogus logical sector size 616
[  730.751621][ T8401] FAT-fs (loop4): Can't find a valid FAT filesystem
[  730.847467][ T8401] loop4: detected capacity change from 0 to 6
[  730.881034][ T8401] FAT-fs (loop4): bogus logical sector size 616
[  730.906159][ T8401] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:27 executing program 5:
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="03212139", 0x400000)

14:08:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x10000c0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:27 executing program 1:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendto$inet(r0, &(0x7f0000000040)="c39a0a3b80e1164095fa5f5479bed3136debdc2ba5fc330f8511d6736b8eb4cd763a02aebec3b98ca4857c31db6cc066d14499f826fbfe843f2e78d17b5fe00e7a518f605c8ff4f799bbb4ca3c204c4d4ce366d6df3ed7e334efeb1b408365fb527a305918534c2d0578264ec0a0cff067493a21f1142df252e8af8111b55f990c56d057e6a51731e7dc8802c260ac5c498bac4fad5243c05da07f2d5f1e38bc15ded5e9808720b1356610981edc9d60eacd4de0dace0ac1c59f0b87855085eeb442ca35fa24310e4d83", 0xca, 0x2000c000, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10)

14:08:27 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000080)={'syz1', "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"}, 0x1004)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661746c028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
accept(r1, &(0x7f0000000140)=@alg, &(0x7f0000000040)=0x80)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  731.335033][ T8471] loop4: detected capacity change from 0 to 6
14:08:27 executing program 5:
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="03212139", 0x400000)

14:08:27 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="3efeb0eca798a200e4c67ed47aa3c681c42e952bcd0a731ee79bce475a66721fe8453c37e22b39082dd62b29eacde196bd53d1c89cd025ef8fcedba3ffe30fcec2f4a4212cb25f8b841b2a9253b2368dfd04f5986695cd9a43d33e3f8322cc368d0a8d4910b594a635dc3c7edac7efc6916eafcd369af559c409841176451f3dbc8bd7e8e085ca7b3fd87f13ca24ca0ca13a8b5526d79a9170323a392207ba7f0a950bf921c4b7c67b7d4db6ebc0e7cb999acb444849c2cb8493251ed142cb1bef9811", 0xc3)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  731.408849][ T8471] FAT-fs (loop4): bogus logical sector size 620
[  731.430528][ T8471] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:27 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r3 = fsopen(&(0x7f0000000080)='vxfs\x00', 0x1)
dup2(r2, r3)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1000100}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  731.505201][ T8471] loop4: detected capacity change from 0 to 6
[  731.543042][ T8471] FAT-fs (loop4): bogus logical sector size 620
[  731.562342][ T8471] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:27 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617474028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:27 executing program 1:
timer_create(0x5, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="e3fa0000b51f3564f5d232c33e011e468320ae6cb762e0a84db0dd6fc033120375c8b03a8979a674aa6a09471d77a2bd404fda7275806d668641a4ad7d6feb0daceb5def6ce1c2f4969ee552d9ff2c05abdfd7d696166aac9c16341ddf82cf662778338e78e95a85721990ed6dbd70ebe5f7637311aff01087c0fd3aac1327739b9a511690aeabae422084e687abc4d45b992bfcafcb72405a40ddc8d71496072915b60f91b0610acbb1a57eaace4c0783ddfb0213388221083629454e2645518728c9b6ff151d8e236d0a3da5f197300cd8417df866299819897c1545", @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000881)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
syz_mount_image$befs(&(0x7f0000000100), 0x0, 0xfffffffffffffe15, 0x2, &(0x7f00000015c0)=[{&(0x7f0000000540)="61e9279d5040f8cd0088150317401d158f60099537cb277a4933a9157d2524801194", 0x22, 0x4}, {&(0x7f0000001880)="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", 0x1000, 0x401}], 0x82402, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002b80)=[{&(0x7f0000001700)=""/16, 0x10}, {&(0x7f0000002c00)=""/145, 0x91}, {&(0x7f0000002880)=""/206, 0xce}, {&(0x7f0000002980)=""/236, 0xec}, {&(0x7f0000002a80)=""/137, 0x89}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f0000002b40)=""/22, 0x16}], 0x7, 0xd9f, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000000540)}}, &(0x7f00000003c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x144}, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15, 0x2}, &(0x7f0000000400)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000580), 0x10000005c)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)

14:08:27 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f0000000080)="1dc11164cbd14411bdd445f667", 0xd)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
dup2(r3, r4)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:27 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x10d0000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  731.800767][ T8517] loop4: detected capacity change from 0 to 6
[  731.854496][ T8519] loop1: detected capacity change from 0 to 264192
[  731.864942][ T8517] FAT-fs (loop4): bogus logical sector size 628
[  731.888992][ T8517] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:27 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000200)=""/81, 0x51}], 0x3, 0x4d, 0x1ff)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  731.970406][ T8517] loop4: detected capacity change from 0 to 6
[  731.998816][ T8517] FAT-fs (loop4): bogus logical sector size 628
[  732.025500][ T8517] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:28 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617478028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:28 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r2 = syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3f, 0x7, &(0x7f0000000540)=[{&(0x7f0000000140)="2be19d30be6bb263d301e22087a465d3793a9fdacc6c98d5906e87d4c5ba640ea98c0590325307e89b70a2ae06bbaa3ccdd2d0de2aecc8e41405634958ab5f88d7ef", 0x42, 0x2}, {&(0x7f00000001c0)="3d5249789ae63e85916cfabe08333d7ef554d156344f2869ebea44a38e3a74e78ebbc88510e8cf3526b266bc5f615d3a125fc009620f13e6c8685b4049beb73bd64299ce4e147df0d8bbce840b8a62c26b7fa252", 0x54, 0x308}, {&(0x7f0000000240)="4ff382acc7c7fba40ea914e78b095ce33dbc4b52b5fd20f250723440b8e91ce97d20d6e9cdbb4071beacc18b78144a07008925353484732538d7758544170108564f1e62702a15350d874fc690ac0e81e8752093b7d71a1bbac440a2e0a479e3ae750d074af923d282145bb8622fdba67e1eb3b2a002ec7ad1a956f24cca", 0x7e, 0x7fff}, {&(0x7f00000002c0)="dd9daacaf696d5f4215fa97134b3c3331277860d259ed9bb10b1de2050740f76b471483ebfe6ac8d48c00f17616e62b31d7922224da8f20de0f19a2ce2bf859dfacfc3ea222c02b6c9c594095362c740adc5d919a92041334b441ca280e525f65e095a49d8e7fe9e2b3fe8", 0x6b, 0x7}, {&(0x7f0000000340)="81f2d795a06a94b77a575f418acc3a0dca1cbfb986884475b9491e944f5378c3a8d2390423b44aa055d67a5028f4315a367d89c1fd5afa878d641c656a0096988313a79a907408f63638ac97f0ee336ca71710463bd050d2e1a76621c3e589648be525934a02d4411d59d1fc263fe8cbc271021ab93215f8d72283e50b4fc561c01dfa1abbce8b5acff81aec52a79d5efffaede139269820c6343d67b0598c55c4aa73471fb5cfbd0ea2fb72564985370e5c224d64eed82884fd0e4933ceb9df52e56e7d525ff1", 0xc7, 0xfffffffffffffff7}, {&(0x7f0000000440)="97b4c1fc19158ae3715f2100a879e9aba35bc97b54800a9f653636b8591d727c7b98aaf8d40c0a185f497febd891847e35f8f30057cebe12807d3ad6d52f945aef59eded959ed4a712adcf29b575d9f4a4f8b5616348c1fd2c037411a4a53723aee95b38f563841285b3b49784b2370717239ed8c90abc11365ed0fdebb47f7d87703ee22ca5", 0x86, 0x7b9}, {&(0x7f0000000500)="be1aa4fbdc78ba2043558d6f2d1c67f4337973702eef2d40918d6f0fcf1d18905bff032a", 0x24, 0x3}], 0x1004004, &(0x7f0000000740)=ANY=[@ANYBLOB="2f6465762f6d4953444e74696d6572002c2f6465762f6d4953444e74696d6572002c5d2c2c2f6465762f6d4953444e74696d6572002c2f6465762f6d4953444e74696d6572002c736d61636b66736861743d2d2b7b7d40242eb15d2c657569643d", @ANYRESDEC, @ANYBLOB=',mask=MAY_APPEND,measure,fowner<', @ANYRESDEC, @ANYBLOB="2c00b9977c135786156d515f5149a16a48d76aea7b8d64610388bd49d18f1cbbf78099f4fa4f45f6c773b7daade4167f2298de4d0e7c12a696dfa39739d251237ec5413f8f8eae526fa8b78e1be2641a1287913556d7d9e453fcfdc8937b7a29aec92e27339abd7b11416261fb86d66736fcfac3bb64"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4010, r2, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="46040000af322e3df4eb27c2adbdd732361a9914eca670a90c4004b92a9e5ece93a4e03a33414c1bf7d3cf5d7da05de8615066a4c63f397f4d673b6741", @ANYRES16, @ANYBLOB, @ANYRES32=r2], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r1, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x2000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  732.325771][    T7] libceph: connect (1)[d::]:6789 error -101
[  732.352156][    T7] libceph: mon0 (1)[d::]:6789 connect error
[  732.392220][ T8519] ceph: No mds server is up or the cluster is laggy
[  732.406199][    T7] libceph: connect (1)[d::]:6789 error -101
[  732.406252][ T8558] loop4: detected capacity change from 0 to 6
[  732.419430][ T8559] loop0: detected capacity change from 0 to 16383
[  732.436461][    T7] libceph: mon0 (1)[d::]:6789 connect error
14:08:28 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  732.459888][ T8559] cramfs: Unknown parameter '/dev/mISDNtimer'
[  732.470713][ T8558] FAT-fs (loop4): bogus logical sector size 632
[  732.494123][ T8558] FAT-fs (loop4): Can't find a valid FAT filesystem
[  732.575472][ T8558] loop4: detected capacity change from 0 to 6
[  732.578737][ T8563] kvm_mmu_after_set_cpuid: 5 callbacks suppressed
[  732.578750][ T8563] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  732.624188][ T8558] FAT-fs (loop4): bogus logical sector size 632
[  732.643132][ T8563] kvm_mmu_after_set_cpuid: 3 callbacks suppressed
[  732.643146][ T8563] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  732.665383][ T8558] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:28 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f000005b000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x4760000)
preadv(r1, &(0x7f00000002c0), 0x0, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x3000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:31 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:31 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x41)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617479028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:31 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f00000000c0)="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", 0x274)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:31 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="bfa32f0e0883f9602f3e07fcc50eaa253bbbdeaf89ba4429310d25a70f1c45534d3a80e44104b9c7d19f72a78e6c50e9ddfec365cd466b1dab1f47d01cc037fe681e63e8163b31b20b566b5f3962bec039f1c704f9847c283229ec7acad79b521e66831ea8268175657ec1466f9e6fef558ea16205471f33ceee692f6a54218b529098349ac629aa28bf233bf31f49ead5692c817426e540431d2f99e13f4a74", 0xa0}], 0xa}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0x2, 0x0, 0xfff, 0x2}, 0x400)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x8000)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  735.504591][ T8599] loop4: detected capacity change from 0 to 6
[  735.519961][ T8599] FAT-fs (loop4): bogus logical sector size 633
[  735.528781][ T8599] FAT-fs (loop4): Can't find a valid FAT filesystem
[  735.551567][ T8600] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:31 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  735.576371][ T8606] qrtr: Invalid version 18
[  735.581499][ T8600] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  735.629578][ T8599] loop4: detected capacity change from 0 to 6
[  735.633024][ T8606] qrtr: Invalid version 18
[  735.692288][ T8599] FAT-fs (loop4): bogus logical sector size 633
[  735.709851][ T8599] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x4000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:31 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)=""/49, 0x31}], 0x2, 0x8001, 0x7)
write$qrtrtun(r1, &(0x7f0000000080)="8e0ea27126238703837ba368f143376523c78d765c42017c5083562500cc2e24215a44489b90775a692363f448c89c80908bdcc18a5c371489bbd584ce49e7e92b61a88b4e5869264afc338d26d20be5d385e819be0ad6ccbb9e14e1064bb9", 0x5f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:31 executing program 1:
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000))
ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x5, 0x3, 0xffe00000, 0xffff, 0x8001})
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0xa00c1)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:31 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="03212139", 0x400000)

14:08:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661747a028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  735.969769][ T8629] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:31 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x228c2)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
read$qrtrtun(r0, &(0x7f0000000080)=""/205, 0xcd)

[  736.019786][ T8629] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:31 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="03212139", 0x400000)

[  736.088221][ T8640] loop4: detected capacity change from 0 to 6
14:08:32 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, {0x10, 0x8}, {0x8}})
r2 = eventfd(0xd990)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
r4 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x32)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000840)={0x0, 0x1, <r6=>0xffffffffffffffff})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
io_submit(0x0, 0xa, &(0x7f0000000a40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xfffa, r0, &(0x7f00000000c0)="2ea65fc78cd5a7a6ef67c4e7c4e624b8ab232e309fae58c1da0744f2d69953ce3795893eb7b55af7b145b8fcd1818b3c2892", 0x32, 0x5a7, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="ff10d2a87ed53c81503e345659d3214c74534c7cb45f75f23ea7d01f382ca7f1c62b7ee0cc10a6ea8b82a1650181f71fb8932c327347aa45fad0fa0b658e51c3341cce69aa71fd4e9e014dae2ac860407e1ada762a1716ebaa4efbf86980a64bb9978fe74e61f829d0b5b8ccd56f928c5723828f1118b65ded9d457c68ed03698446616fd4f40cf93a5b4a8ea5da59272d5a6deaaf2125587ff5789593e4d9d5941d2ebd157cc2eaf6aeec8212eb76ca44a2611cc471ee83cefa777e3e4c", 0xbe, 0x9, 0x0, 0x7}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xe, 0x1, r0, &(0x7f0000000240)="b2686d96fe0bfdba6a686072ddb5c8955d8770b0e1dd92e6825e02c34e97ef66a322de6839f1a848f290fbd427ef764cf9f54f964dc22f983bcc7b6f197bff3f9d5c17887e3a4d4b16504d2dffda70e8073ca7419b03dc4e78082b4a3def4629bacb7df887d08e6a9c0c6cd99a9dfc0a0f9c23f97adfc4fb8f9d2c7ab23d5e88482d2d7a1abb413d471d3276075e898f0d5fb10ed12063d153dbf2bcce89256b5a937277fd", 0xa5, 0x81, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x7f, r1, &(0x7f0000000340)="ccd14eb2e8a8b2640c", 0x9, 0x8, 0x0, 0x0, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x800, r3, &(0x7f00000003c0)="eafe382cc06dbfaff93a43a5e579002df92854c3eb2b2ac4689af42108510aa14ddf618b0169fa43ba6b8243d2b087441a9f1f064ee45d87737b5462b3e2c807bb607e9f856fc3c9b61e3dc2d33773a7a86a219ebd990396a233da7a4998372ed6fb82941a3d5eaa45d3f647ab03c811a242ece06f79548c0d3326e2bf6c5bfbd243d9130d4823bdde883e9149b020446e7dffa7c588b85a7e5101416b3ee3a09da180d2142e34cb32792bc37534b56e97051d9739190cc52f460d570b1ca6be07944e60f1c89c9bd731c493a842007af497db5a08000f5c0e721f2c292dcca66d555b095b431d1f634ecf1e02ef75", 0xef, 0x9db2, 0x0, 0x6, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x12, r0, &(0x7f0000000540)="06624034582ada31ffe1672fc3edfbc484d6d202dc1580fc9809e52b9100ed1715caa7b34f09c864ef45e17a046c48efdc5d1b5852d381f033f469d1a1bbd723db1fae70431c6cd89dcc2f99300b2991e0ae568b4f1ba533a6eeacb01f12d1615454c12177f7d2c7b69ab361b2bdf0b46c03603a84def7d2bc6567a78dcee2f43eb4221a97dcf06d51adf2cda944c8cbc17005eab01621173d57ea51a9fa61e18bbf23e2192d29442a3e35d675d2734033d4ba6aad680278737cde691455db818ec36247996b1e9d83cceb89972691a15c2f9a49da3a360f39a54f938285efc2fb051c", 0xe3, 0x81, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000680)="5d28734b2a073bddb984dff52a563a0d27b7412140afa51eadeb34f1454491b2d550c4a27d82e6598a2842db00f5d278b7a3bc86f797eb1c514caa7adec7169b0c3e033305a5f115bb5af62a2a030cf7b797c13b51aff7a0eb6ca831651e1a550539e2f57a252058c87cf3ff11edc4b81a2aac42ff32eb9088b872498640bfe5c9b1ed1a67682fb92f11cfd4ae2e77a6a50f1650111a4dc87c88a2decfb929a88e9f60a886070b96187760895048db3c977e2a86967c18761273f4134802ee35dfe12e3be8b094d8ab5af918c7dd6e0cc8b22bf58ee891479ebbe0024df836e4b16cfba2e2e8", 0xe6, 0x8001, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0xf99, r0, &(0x7f00000007c0)="fb27ff58815cd9547ba6f49d", 0xc, 0x401, 0x0, 0x2, r5}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x1000, r6, &(0x7f0000000880)="2c86c8f80d7475dd29c60161db7d5121dacd6125bcd739323a5750207b3c9636e2608682d1a24b407e18ebcb6beb75404bfd82c69b122622494c4683128c6f70e6cddd4b762462bdd8920bc7bff444b6bba8cd4a5acbd6393ac0890dd8a09d17d92f7a6fe3ae9671b0ae97e89d54898aca0daa9408b7e7f33cc77664582bd44fb0d4fee240d4e364e6d89480bb42e1105e39b55fd2a2130818ea49e077ab7b07d4", 0xa1, 0x5, 0x0, 0x1, r7}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f0000000980)="1e71c8e68b4edb5e318f1503648720b9e4ec73436cc33426cd0386e6403759757e2d14093663494a4b40c3d5c5c15c159511429c27172c450e44e5043706356341fc6d69483df675f271514a", 0x4c, 0x8, 0x0, 0x1}])
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0)
preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x5000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  736.129734][ T8640] FAT-fs (loop4): bogus logical sector size 634
[  736.152087][ T8640] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:32 executing program 1:
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f00000000c0)={0x11ec, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4a}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x1130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3f, 0x2, "b249eda30951d1233091e9500ea525f393cf7b5dd2dbc5a8170198c24a4ac4edde59c2d5d6dbdae14efc134029e797d0ea43af5777cab756703f6e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x25, 0x3, "f95c84d0aaf7d7a9a2a9106035befa5c38c3d3138d47c398e29d44e34a6b0db6ec"}, @NL80211_FTM_RESP_ATTR_LCI={0xbf, 0x2, "3bcbd842c04d7a2adb4b382ac3b4ffd67461ae2823f186a56946b5c930c7e7d2d6567ca14feeb469c67c0c0ed70c62ed7b7272c3de461a10d46b5fb59e26a5a6b9ab048026b9f1b001c1f95c7a3a132b60dd6e31c5f66ff934939bbeb73b272ac5deb7e57d701daa73999d734473f4593180d6c4af8662749f42d784d56f6efb403217dc43fa5eab4578504c983f6474473fc39ac39f30c328f262abbe41d24c541213828493410e224d4fd1fbb0cc336770f3a492662658b6e9f7"}]}, @NL80211_ATTR_BEACON_HEAD={0x92, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0x6, 0x9}}, 0x0, @random=0x3, 0x400, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x6, 0x0, 0x9, 0x3}}, @val={0x6, 0x2, 0x401}, @void, @val={0x25, 0x3, {0x0, 0xa1, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0xa, 0x0, 0x5, 0x0, {0x2, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0x0, 0x5e}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0xec, 0x8}}, @val={0x76, 0x6, {0x8, 0x7, 0x5, 0x101}}, [{0xdd, 0x22, "e62562486268bb9c09012f8f470128e90a27319667a2e42e4cf647b0a67197d28e75"}]}}]]}, 0x11ec}, 0x1, 0x0, 0x0, 0x20040084}, 0x4004880)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = dup2(r0, r0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[  736.221252][ T8640] loop4: detected capacity change from 0 to 6
[  736.232920][ T8640] FAT-fs (loop4): bogus logical sector size 634
[  736.278270][ T8640] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:32 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="03212139", 0x400000)

14:08:32 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100080, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}, {@msize={'msize', 0x3d, 0x10001}}, {@fscache}, {}, {@dfltgid}, {@nodevmap}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, '/dev/qrtr-tun\x00'}}, {@audit}, {@fsname={'fsname', 0x3d, '$'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/qrtr-tun\x00'}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/qrtr-tun\x00'}}, {@dont_appraise}]}})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x8539b000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

14:08:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40012125, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x1, 0x4, 0x1, 0x2}}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661748a028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  736.372270][ T8662] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  736.391752][ T8662] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x6000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:32 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, 0x0, 0x0)

[  736.575222][ T8683] loop4: detected capacity change from 0 to 6
[  736.610568][ T8683] FAT-fs (loop4): bogus logical sector size 650
[  736.622555][ T8683] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:32 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0xfbe8f40fc2c5b5d9)
syz_mount_image$hpfs(&(0x7f0000000300), &(0x7f0000000340)='./file2\x00', 0x4, 0x6, &(0x7f0000001ec0)=[{&(0x7f0000000380)="4105", 0x2}, {&(0x7f0000000600)="04411b835c0709e76f81c6b5158dfa04a70e5193d9e2478b38719ca9f94759806a34c764c4ca4ffb809da28cdd0ea758c6d0fe230c3bfa53af0133858fb3bd3c30b16daf378d2b8143edf1d0d61ef10e1e00aca321c6806e09aa2cdf75ca14a93fe0a5998fb86fa230790ac7b63aae89e6d8f1c2fb7cfd0d66a99fa792dd745c978cd1ff535fe9ae88fe0ccd376ded857f5e8ba9d4c27553fe871d4e106e9999d4", 0xa1, 0x9f41}, {&(0x7f0000000780), 0x0, 0x8001}, {0x0, 0x0, 0x3}, {&(0x7f0000000a00)="a483d6fe5bd42f2b050c799a2c9f5850ea36b3beb3a7dc0c28debbf1c0fe9b7eea2676c92429c07030c5d0b60af9e23b10bdf9cbd6631cd7e0c313f230cfbc610df50c0d1b7f5e1868523f9bd041a61fe70e26964e70a396fa9bf4858c2c64329723c2fae828684a626448588a9259943b053d87dd4f2c1bfc76ac4e2f4ee2151e159e422506c5f256832633ac261c4c7507b2c0a889b1", 0x97, 0x7}, {&(0x7f0000001dc0)="d415f8056e4d45abe83b00ead51aea02436bf288cfccc86a884dc4711d5ebddb37af9e9cdd8d40d7db5b57614fdcab62d1956e87e1b10d1416851bbfedccde4f8d65c69ba6181b9e5e2ddc832071517b1943dc5eeee34b899e1802f88501f641f283c5a4545e663b0dfcb553773253fe2cac1390b4dbe1eebae739f8d9a3f68d2927679ff76ec033af976f078826974685c79554c356a9c2107dc1dc8c962f", 0x9f}], 0x1020000, &(0x7f0000002140)={[{}, {'[]-*+'}, {'802.15.4 MAC\x00'}, {'erofs\x00'}], [{@uid_gt}, {@uid_lt={'uid<', r2}}]})
r3 = syz_mount_image$hpfs(&(0x7f0000000300), &(0x7f0000000340)='./file2\x00', 0x4, 0x6, &(0x7f0000001ec0)=[{&(0x7f0000000380)="4105", 0x2}, {&(0x7f0000000600)="04411b835c0709e76f81c6b5158dfa04a70e5193d9e2478b38719ca9f94759806a34c764c4ca4ffb809da28cdd0ea758c6d0fe230c3bfa53af0133858fb3bd3c30b16daf378d2b8143edf1d0d61ef10e1e00aca321c6806e09aa2cdf75ca14a93fe0a5998fb86fa230790ac7b63aae89e6d8f1c2fb7cfd0d66a99fa792dd745c978cd1ff535fe9ae88fe0ccd376ded857f5e8ba9d4c27553fe871d4e106e9999d4", 0xa1, 0x9f41}, {&(0x7f0000000780), 0x0, 0x8001}, {0x0, 0x0, 0x3}, {&(0x7f0000000a00)="a483d6fe5bd42f2b050c799a2c9f5850ea36b3beb3a7dc0c28debbf1c0fe9b7eea2676c92429c07030c5d0b60af9e23b10bdf9cbd6631cd7e0c313f230cfbc610df50c0d1b7f5e1868523f9bd041a61fe70e26964e70a396fa9bf4858c2c64329723c2fae828684a626448588a9259943b053d87dd4f2c1bfc76ac4e2f4ee2151e159e422506c5f256832633ac261c4c7507b2c0a889b1", 0x97, 0x7}, {&(0x7f0000001dc0)="d415f8056e4d45abe83b00ead51aea02436bf288cfccc86a884dc4711d5ebddb37af9e9cdd8d40d7db5b57614fdcab62d1956e87e1b10d1416851bbfedccde4f8d65c69ba6181b9e5e2ddc832071517b1943dc5eeee34b899e1802f88501f641f283c5a4545e663b0dfcb553773253fe2cac1390b4dbe1eebae739f8d9a3f68d2927679ff76ec033af976f078826974685c79554c356a9c2107dc1dc8c962f", 0x9f}], 0x1020000, &(0x7f0000002140)={[{}, {'[]-*+'}, {'802.15.4 MAC\x00'}, {'erofs\x00'}], [{@uid_gt}, {@uid_lt}]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fanotify_mark(r4, 0x61, 0x1, r3, &(0x7f0000000900)='./file0\x00')
syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xb13e, 0x8, &(0x7f0000000780)=[{&(0x7f0000000100)="a13817a1322502368284ef1f867be7977ea83ac1d51dbb02d986b405cff8cd14df054a2c70a9cc107ef6f16cddf933a1978b229e1ac66856ad931dfbc5190b5a4c677acc66473dd26a3c8f89f4b04f47806de7f53c4f4930e5be3a9f134f10303b3d39d69e1b754f1b37b71cb5ba82ca94e6fbed31a2ac84b52032154f703d9d1c4a6ac9c5ea64da2102f88c61e4d25e9dffd5d069c4a379a607b7213dc84e504ac3", 0xa2, 0x8}, {&(0x7f00000001c0)="76ae49275d7fba370f05c94242aa4bfd862816f5e4ceecb5457f9d6be23bdc1e673e2dc51029a6004ab4a59ffead8de34b4968809936e17a8ac20d07db6a3875f2d6ca05ac0fd0655a7484c311c0789304a47433d440a464fc88275035f85e7c868dbec8d57f02b50fb17a4d1bb95b14c5752bcdffd162615f85edf8a4c5cec139ad6787b3b75375099455f5080dbb19a03e4607bc9975eeccbe053e58e8d7a8ae5d6db90646b6ddc77fe1", 0xab, 0x40}, {&(0x7f0000000280)="aac530ead6a25d50452cdc62ca403acbe8d68d5857e40735bab1a90123971aaee1b9578b335f465797a3194ae75ae7667ff08dcb6902fd20074900758d72c677028baf8b67619434c071c3c2ee6a5819f6d0b2471caa770322da6bf330a0a33840321a459daf5538c33bcfcf4b2459438f53309a252aefb23b0e32da9477cbf07559d2453b9d69ea", 0x88, 0xfffffffffffffffa}, {&(0x7f0000000340)="31bb2bcee18c0c5358e27fc4da1d48efc23fbc5bb6cf8c96d6c3282ee113fdf4452b5494ec6306db0c9a7cb0370830243aaffcb3d5c86ff081888677683cd8fd653011e4aa919b96d40422934aa233602cd4028214c86e0f3738cf63206aca49b6aba28dc4d3659a0c18e9d9cab7f57291a9e8eff568b206d88a5ad51ecc5183704144d92598787b0c47056216cf0f3399fdb592a38354b001cb2fa0f3907514e2", 0xa1, 0x20}, {&(0x7f0000000400)="51ac68e2200071da3df4463569455dd9b43d04176676c7490c1d735d9ee37df05681fd8e7da72a260bf080f249927871f6a3aa4d555dbb0ac701408be0f8e447f0ef026073ca802c707b05eef0d917152f34d221d9afc3d4f7d21b0c062e8ef21c3aafe5457aef8206eef9933e42a7548ef5732444a56e7c76cc618012ce4022c1ae57f709e2c332e0991489cfe917e9b8e3ef65cd414ee0af47687a686e9d0f6bd1c0d0bd723347ab9ca6b89977010d7a146a14a8df70fd3a5cf6988c80d0afcbd308959e9f895a109e15ec249a926b946f66887fcbf2945ef7a06fb6cdbf339f1f4a499a5155d3a2a45f1290", 0xed}, {&(0x7f0000000500)="57c3eaec72bf27f8785cbdbde4d0de3a9732ad58721da1b210d2f59796ff09d59c274728b70574270bbd1dae0761080d9f103cf734e3bfd1aee3105a5321c13759667db87f62d4872804432273193bc5fc37171295fa6087e3779cfd91d84ae9c6f3ba0df8d97e030ef723188abda79898db3b72605f34af40c79f52b40a", 0x7e, 0x9}, {&(0x7f0000000580)="22997196601c1347bf95165d84d889c2147bb7b8d50910f20cd2b03b9835f3cc05c4033c0af749c34d5bba55439b2126ebe4d265e1e3d0072fd97271ee2d5e158c28b20cf15a80d25531b3046a1f2d58f02c822f6343f8deace7058ae3caddeffd021cc731340e1bcb7797adb97aef4834c0105f385546aa085c2246008267b74d35faa96421636e53e243df8497ed6e87879608b0948d20043aa8834ddd4fe537f0074d1deade7060b7ff482dd02f17ac6d262de3487783262e5a91105180d1597b374dba2b16bd6a", 0xc9, 0xffffffff}, {&(0x7f0000000680)="283729cf73c266a9b1dadfba67f642ccda94a365edaafaba6bea37cdf8023e0fe7486cd1d7558fd40d0f5f25488fd4bdd293beb8f6d3b29822ae296256924915e2030fd212b6f20deb74188f9f8b03a05caf9d1dfafff46c467abbc5a66fd2f4b4dd5320277e966e356a191792f441f7ea00f3d3ff0bb6141fed6170334d0f1f66f5b346e8764579765873e795f9ba703f51708505a735a4f0e84d15aa760387d105df1aedf20b3145d8fb9a2a36b0ae297ffc48c1186bd819947a472d035d06ce71aa719c78d9688a234f81d14a65201416d85f5f602999d9470ca8eeeefa2315a1df887f4e", 0xe6}], 0x102000, &(0x7f0000000840)={[{@flock_strict}], [{@context={'context', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/qrtr-tun\x00'}}, {@uid_lt={'uid<', r2}}, {@subj_role={'subj_role', 0x3d, '/dev/qrtr-tun\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_gt}, {@hash}]})
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  736.687753][ T8683] loop4: detected capacity change from 0 to 6
[  736.696689][ T8688] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  736.710517][ T8683] FAT-fs (loop4): bogus logical sector size 650
[  736.725087][ T8683] FAT-fs (loop4): Can't find a valid FAT filesystem
[  736.733211][ T8688] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:32 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, 0x0, 0x0)

[  736.778313][ T8698] loop0: detected capacity change from 0 to 159
14:08:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661748b028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  736.880355][ T8698] loop0: detected capacity change from 0 to 159
14:08:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x6000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  736.952494][ T8698] loop0: detected capacity change from 0 to 264192
[  736.970843][ T8710] loop4: detected capacity change from 0 to 6
14:08:32 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, 0x0, 0x0)

[  737.008354][ T8715] loop0: detected capacity change from 0 to 159
[  737.020062][ T8710] FAT-fs (loop4): bogus logical sector size 651
[  737.038218][ T8710] FAT-fs (loop4): Can't find a valid FAT filesystem
[  737.081551][ T8718] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  737.100080][ T8718] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  737.100147][ T8698] loop0: detected capacity change from 0 to 159
[  737.134662][ T8710] loop4: detected capacity change from 0 to 6
[  737.166727][ T8710] FAT-fs (loop4): bogus logical sector size 651
14:08:33 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040), 0x0)

[  737.184521][ T8710] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174fe028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x7000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  737.413214][ T8747] loop4: detected capacity change from 0 to 6
14:08:33 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x120082)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000100)=""/222, 0xde}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)=""/112, 0x70}, {&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/147, 0x93}], 0x9, 0xd9f, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0xffffe000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:33 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}]}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="000229bd7000ffdbdf25060000000c009900feffffff1700000014001780040004000400010004000300040001000a00e800ffffffffffff00001c00e7006d689db72691b549be5bee0cc4fd6a9e224ec651e4434c3b0a00180003030303030300000500530000000000050053000000000008000500070000000a00e80008021100000000000c00178004000300040004001c00e700dfb29effdbcb2f88d807099062bfe90d417c0040e63f2ee1"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x90)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:33 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040), 0x0)

[  737.466701][ T8747] FAT-fs (loop4): bogus logical sector size 766
[  737.480711][ T8746] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  737.517255][ T8746] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  737.520031][ T8747] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x7000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:33 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:33 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040), 0x0)

[  737.626476][ T8747] loop4: detected capacity change from 0 to 6
[  737.644688][ T8747] FAT-fs (loop4): bogus logical sector size 766
[  737.707543][ T8747] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:33 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8100, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, 0x100, 0x5)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400038001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:33 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="0321", 0x2)

[  737.838588][ T8771] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  737.868144][ T8771] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  738.014942][ T8790] loop4: detected capacity change from 0 to 6
[  738.054533][ T8790] FAT-fs (loop4): bogus logical sector size 768
14:08:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:33 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={0x1})

14:08:34 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="0321", 0x2)

[  738.080558][ T8790] FAT-fs (loop4): Can't find a valid FAT filesystem
[  738.129212][ T8790] loop4: detected capacity change from 0 to 6
[  738.161348][ T8790] FAT-fs (loop4): bogus logical sector size 768
[  738.174638][ T8790] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400058001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  738.260086][ T8801] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  738.285808][ T8801] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  738.399794][ T8814] loop4: detected capacity change from 0 to 6
[  738.431101][ T8814] FAT-fs (loop4): bogus logical sector size 1280
[  738.445504][ T8814] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:34 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="0321", 0x2)

14:08:34 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(r1, &(0x7f0000000340)='./file0\x00', 0x20040, 0xeb5da02f0ffcf6f3)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000200)=""/179, 0xb3}], 0x2, 0x1, 0x7)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000000c0)={0x1, 0x38, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  738.519358][ T8814] loop4: detected capacity change from 0 to 6
14:08:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000008002a00822b440001020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff000004005f000a00060050505050505000000a000600505050505050000004005f000600360003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="4604000042ff2e8bc3e9abb426", @ANYRES16, @ANYBLOB="e91265896d0a57f7adce98cc7f82d3078d1e09be36e7e6d5f58b", @ANYRES32=r3], 0x4}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc2})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  738.581961][ T8814] FAT-fs (loop4): bogus logical sector size 1280
[  738.624224][ T8814] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:34 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:34 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="032121", 0x3)

[  738.705001][ T8830] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400068001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  738.751005][ T8830] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x9000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:34 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="032121", 0x3)

14:08:34 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
io_setup(0x8001, &(0x7f0000000080)=<r1=>0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x591765db, 0x9, 0x80000001, 0x9, 0x5], 0x5, 0x800, 0x0, <r2=>0xffffffffffffffff})
io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000000c0)="0d45e9499a69711501ebe357be2056343fa68d1ec29d86208ecac7f31ed06829f5639d8ee8a53a992c5f5ebb27672d6201855a6e8bc199173213739fd543ee1405a2a1e18d9334c1fa17cb12007d1c71076e04f1aaf6128c3497197ae77e29bea9124dc190059df5b436023eab3e60e3e91a9cf863d4bc6638d2e2ae65211ccd026108ab1b5c3d6c4c6331a84681967a55", 0x91, 0x4dff, 0x0, 0x1, r2}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  738.904669][ T8846] loop4: detected capacity change from 0 to 6
[  738.953035][ T8846] FAT-fs (loop4): bogus logical sector size 1536
[  738.975781][ T8846] FAT-fs (loop4): Can't find a valid FAT filesystem
[  739.043568][ T8846] loop4: detected capacity change from 0 to 6
[  739.043749][ T8852] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  739.062873][ T8846] FAT-fs (loop4): bogus logical sector size 1536
14:08:35 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="032121", 0x3)

[  739.087913][ T8852] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  739.112722][ T8846] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xa000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400078001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:35 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000540)=""/241, 0xf1}], 0xa, 0x5, 0x8000)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000700)={{r2}, "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"})

14:08:35 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x41)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  739.413939][ T8875] loop4: detected capacity change from 0 to 6
[  739.453434][ T8874] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  739.476797][ T8874] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  739.489828][ T8875] FAT-fs (loop4): bogus logical sector size 1792
[  739.516571][ T8875] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:35 executing program 5 (fault-call:1 fault-nth:0):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xa000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  739.601859][ T8875] loop4: detected capacity change from 0 to 6
[  739.637428][ T8875] FAT-fs (loop4): bogus logical sector size 1792
[  739.664209][ T8875] FAT-fs (loop4): Can't find a valid FAT filesystem
[  739.692433][ T8893] FAULT_INJECTION: forcing a failure.
[  739.692433][ T8893] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  739.723082][ T8893] CPU: 1 PID: 8893 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  739.731776][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  739.741828][ T8893] Call Trace:
[  739.745105][ T8893]  dump_stack_lvl+0x1d3/0x29f
[  739.749795][ T8893]  ? show_regs_print_info+0x12/0x12
[  739.755004][ T8893]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  739.755852][ T8894] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  739.760723][ T8893]  ? __fs_reclaim_acquire+0x30/0x30
[  739.760766][ T8893]  should_fail+0x384/0x4b0
[  739.760793][ T8893]  prepare_alloc_pages+0x1d1/0x5a0
[  739.760819][ T8893]  __alloc_pages+0x14d/0x5f0
[  739.760841][ T8893]  ? __rmqueue_pcplist+0x2030/0x2030
[  739.760872][ T8893]  ? alloc_pages+0x3f3/0x500
[  739.760895][ T8893]  kmalloc_order+0x41/0x170
[  739.760921][ T8893]  kmalloc_order_trace+0x15/0x70
[  739.807197][ T8893]  __kmalloc+0x292/0x390
[  739.811440][ T8893]  qrtr_tun_write_iter+0xbd/0x160
[  739.816457][ T8893]  vfs_write+0xa39/0xc90
[  739.820697][ T8893]  ? file_end_write+0x230/0x230
[  739.825544][ T8893]  ? __fdget_pos+0x1d8/0x2f0
[  739.830119][ T8893]  ? ksys_write+0x72/0x2a0
[  739.834523][ T8893]  ksys_write+0x171/0x2a0
[  739.838837][ T8893]  ? __ia32_sys_read+0x80/0x80
[  739.843588][ T8893]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  739.849557][ T8893]  ? lockdep_hardirqs_on+0x8d/0x130
[  739.854743][ T8893]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  739.860708][ T8893]  do_syscall_64+0x3d/0xb0
[  739.865108][ T8893]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  739.870986][ T8893] RIP: 0033:0x4665e9
[  739.874865][ T8893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  739.894455][ T8893] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  739.902852][ T8893] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  739.910808][ T8893] RDX: 0000000000400000 RSI: 0000000020000040 RDI: 0000000000000003
[  739.918763][ T8893] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  739.926717][ T8893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  739.934684][ T8893] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
[  739.980271][ T8894] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000a8001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:35 executing program 5 (fault-call:1 fault-nth:1):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:35 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000100"/24, @ANYRES16, @ANYBLOB="f0200a5e40d78d504ef2eb84d1ddc1dccbf5032849c83e789f37a1e6433909e21a3cd174b6086427443359b25a80470087c53f7570c831bd265dc9233196f533c523cf473c7bc4b41c769ab72958fee64c31b8a564dbe5227ff592e59fb2888cf35bb429b009a901dd785eea1271bbfcd05a80ffe8bd0f70a58a986e6e5d1e4569bd49e4840020bc89a4a0c38730abf46f85a22b0154abe03fa99585681189a34d507962d461046b13715c2443aa28bd15d652b9904e99ebffed666bbf226a", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0xee00, @ANYBLOB="0800030005b385fc9cac04864172358d1e", @ANYRES32=r4, @ANYBLOB="08000600", @ANYBLOB="f9e3d99d73ae56b3b70f3bdd1d2766cc3e9ed6fab555624f0bce82670818667146369c9ee0c1c43fff1b3166274ceb819c982e7a82be52bbc816ce63162e35ede68ced5e46559c73c82e75cb02083dd49662d7359d2cb620a41f8f52ae23db38f8f45930a1a9169021b73ea04360729f2640ca483e3f3fdac732ff86a6d0", @ANYBLOB="10000200000000002092d446038d03be"], 0x4c, 0x0)
sendmsg$netlink(r0, &(0x7f0000000680)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000780)={0x304, 0x38, 0x8, 0x70bd26, 0x25dfdbfe, "", [@generic="99169a5481d30cfd32be35aa950322117ed0e428661be236469db5be06204ad0f92728196b85c8e0b28cc2bb72f4a1942325d7c3d66e97351f24e59b44dc107e5d89521b01d9c941a9d9c145db1c74cb8036edfd92a4180427b9c68d04393f04b26734ea49feeda1fcf7c3009bfa829651b9f1c8e995a0abf51fdd607d13e1776ba846b73de527c5ade29960e8c0966149fe", @typed={0xa, 0x1, 0x0, 0x0, @str='PPPPPP'}, @nested={0x238, 0x10, 0x0, 0x1, [@generic="daca2d6a79a475d3951b576eccc3d8b641828f031fb372cabde3fcf7f32aa24a331fb7b500168bba08a0facc5a0d8cb959edfcc2d542f8e3838bf07fb126909b178b40aa8556950bb872c21eda54b849668b19f689ded43412904d78ceb912fd9e0c5f2c5dfff912471a6b7ea75682f406d8c86a42a4c823a7db8795a57fc8bf799fb3a8d413ce904b12c03eb68cc3984d5e415ab63f5a7f6d450d599324c8ba2b779c6db32b2bab6a9a9637cb22f3b1687a0d4a0bfafb9f759f0a8d694eeb894f9d2d848d", @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x4b, 0x0, 0x0, @fd}, @generic="185b0745f7a9f0b49ee98351de0c84adf11d8e8b90d3dc72c05438b254e1d181d3e6b0a0a25e990ff5e9e257d8f678d892e25ba85f28778fe08161ad59e1854e278aaf9a113ed1abb90bf7004fef9a20d58c0d4bbb12c472", @generic="6db762075f85823b8cd32b62da9348e9ad9a54c5e79c3ad75eb6bf6a8b54907c0491a3beb2c50aab5ec989d2ce2734630e9edb4d95923921adcc952ace9344dd914af79bfdf07714417bee25dd7cadbb6bf5b3f01d592582ac7bfe341803bfb30fc6f2252c7f0936834d7fad7f7697c8f500cc88b58b8c8c1aef2362ba58d6512a1e0cf1a99a6e27acb61a29742ce0833ceb55e80310823d948fa3f471a904bb62c3168d0cb1af96b1bde87bf3", @generic="50d1b70a44cce4dc3d32f43c94cca3113c176c11beecf6cff5bf7a1cdb5f62513076557dcc036a376a926b482fafa1de013439748bb90a4d04ee17655cb6a52e4446baca45e589d4ad3ee78c50dc9a9678e49283289204cd8d02"]}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x5a, 0x0, 0x0, @pid}]}, 0x304}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20}, 0x800)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xb000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  740.179870][ T8909] loop4: detected capacity change from 0 to 6
[  740.206350][ T8910] FAULT_INJECTION: forcing a failure.
[  740.206350][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.231847][ T8909] FAT-fs (loop4): bogus logical sector size 2560
[  740.247546][ T8910] CPU: 1 PID: 8910 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  740.256266][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  740.256281][ T8910] Call Trace:
[  740.256290][ T8910]  dump_stack_lvl+0x1d3/0x29f
[  740.256318][ T8910]  ? show_regs_print_info+0x12/0x12
[  740.256338][ T8910]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  740.256358][ T8910]  ? __might_fault+0xb8/0x110
[  740.256377][ T8910]  ? __lock_acquire+0x6100/0x6100
[  740.256397][ T8910]  ? rcu_lock_acquire+0x30/0x30
[  740.256492][ T8910]  should_fail+0x384/0x4b0
[  740.256518][ T8910]  _copy_from_iter+0x25b/0x1070
[  740.256553][ T8910]  ? _copy_mc_to_iter+0x1470/0x1470
[  740.256576][ T8910]  ? trace_kmalloc+0x2e/0xe0
[  740.256593][ T8910]  ? kmalloc_order_trace+0x41/0x70
[  740.256618][ T8910]  ? __virt_addr_valid+0x21b/0x2d0
[  740.256639][ T8910]  ? __check_object_size+0x2f3/0x3f0
[  740.256663][ T8910]  qrtr_tun_write_iter+0xe0/0x160
[  740.256684][ T8910]  vfs_write+0xa39/0xc90
[  740.256708][ T8910]  ? file_end_write+0x230/0x230
[  740.279398][ T8909] FAT-fs (loop4): Can't find a valid FAT filesystem
[  740.279910][ T8910]  ? __fdget_pos+0x1d8/0x2f0
[  740.360050][ T8910]  ? ksys_write+0x72/0x2a0
[  740.364467][ T8910]  ksys_write+0x171/0x2a0
[  740.368790][ T8910]  ? __ia32_sys_read+0x80/0x80
[  740.373542][ T8910]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  740.379949][ T8910]  ? lockdep_hardirqs_on+0x8d/0x130
[  740.385137][ T8910]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  740.391120][ T8910]  do_syscall_64+0x3d/0xb0
[  740.395527][ T8910]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  740.401410][ T8910] RIP: 0033:0x4665e9
[  740.405292][ T8910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  740.424882][ T8910] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  740.433282][ T8910] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  740.441238][ T8910] RDX: 0000000000400000 RSI: 0000000020000040 RDI: 0000000000000003
[  740.449205][ T8910] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  740.457159][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  740.465126][ T8910] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
[  740.513721][ T8909] loop4: detected capacity change from 0 to 6
[  740.535912][ T8909] FAT-fs (loop4): bogus logical sector size 2560
14:08:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xc000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  740.571341][ T8909] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:36 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_delrule={0x58, 0x21, 0x400, 0x70bd2b, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x4, 0x5, 0x0, 0x0, 0x8, 0x8}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FRA_SRC={0x14, 0x2, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4d3782b44e993b15}, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={<r3=>r1, 0x2, 0x1, 0xc519})
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000680))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000009d72d5d7a4e1d69f1000000850000003d0000003f20f8ffd0ffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x401, 0x85, &(0x7f00000002c0)=""/133, 0x41000, 0x3, '\x00', 0x0, 0x11, r1, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xc, 0xfffffffd, 0xa1757a4}, 0x10, 0x0, r1}, 0x78)
sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="80000000110002062cbd700007000000620000007768d2773e00aa18897c5a58fa22a9d3bceca5d9db63b4f7c76e4f557e89a7e6c76277102c521621e76a3bd8e1bda4754aaf9a1fe6d3691423fb4d07920efec1bb376910328651ff3f4375be9ab5826a2c43a50579262b5e4758308f2375910ab5956dd0ad", @ANYRES32=0x0, @ANYBLOB="040100000040000008001d000004000008000500", @ANYRES32=0x0, @ANYBLOB="05002700090000001400140076657468305f746f5f626f6e6400000008002e000300000008001d001f0000001c002b8008000800", @ANYRES32=r3, @ANYBLOB="080003000100000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00)\x00om\x00\x00'], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x44004)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000f8001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  740.747030][ T8925] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  740.775707][ T8925] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  740.828412][ T8934] loop4: detected capacity change from 0 to 6
14:08:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xd000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  740.901150][ T8934] FAT-fs (loop4): bogus logical sector size 3840
[  740.929469][ T8934] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:36 executing program 5 (fault-call:1 fault-nth:2):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  741.011407][ T8934] loop4: detected capacity change from 0 to 6
[  741.034350][ T8940] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  741.051387][ T8934] FAT-fs (loop4): bogus logical sector size 3840
[  741.057736][ T8934] FAT-fs (loop4): Can't find a valid FAT filesystem
[  741.080227][ T8940] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  741.171698][ T8951] FAULT_INJECTION: forcing a failure.
[  741.171698][ T8951] name fail_page_alloc, interval 1, probability 0, space 0, times 0
14:08:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xe000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617401108001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  741.217638][ T8951] CPU: 0 PID: 8951 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  741.226351][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  741.236416][ T8951] Call Trace:
[  741.239697][ T8951]  dump_stack_lvl+0x1d3/0x29f
[  741.244396][ T8951]  ? show_regs_print_info+0x12/0x12
[  741.249606][ T8951]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  741.255348][ T8951]  ? __fs_reclaim_acquire+0x30/0x30
[  741.260568][ T8951]  should_fail+0x384/0x4b0
[  741.265016][ T8951]  prepare_alloc_pages+0x1d1/0x5a0
[  741.270147][ T8951]  __alloc_pages+0x14d/0x5f0
[  741.274750][ T8951]  ? __rmqueue_pcplist+0x2030/0x2030
[  741.280054][ T8951]  ? alloc_pages+0x3f3/0x500
[  741.284657][ T8951]  pte_alloc_one+0x7f/0x320
[  741.289165][ T8951]  ? asan.module_ctor+0x10/0x10
[  741.294020][ T8951]  ? rcu_lock_release+0x5/0x20
[  741.298797][ T8951]  ? __lock_acquire+0x6100/0x6100
[  741.303841][ T8951]  do_huge_pmd_anonymous_page+0x686/0xce0
[  741.309572][ T8951]  ? count_memcg_event_mm+0x2f1/0x340
[  741.314946][ T8951]  ? vma_thp_gfp_mask+0x170/0x170
[  741.319984][ T8951]  handle_mm_fault+0x2143/0x2500
[  741.324950][ T8951]  ? numa_migrate_prep+0x190/0x190
[  741.330077][ T8951]  ? __init_rwsem+0x160/0x160
[  741.334757][ T8951]  ? vmacache_find+0x4ef/0x5d0
[  741.339524][ T8951]  ? vmacache_update+0x9f/0xf0
[  741.344307][ T8951]  do_user_addr_fault+0x8ce/0x10c0
[  741.349440][ T8951]  exc_page_fault+0xa1/0x1e0
[  741.354036][ T8951]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  741.360201][ T8951]  asm_exc_page_fault+0x1e/0x30
[  741.365062][ T8951] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  741.371727][ T8951] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8
[  741.391341][ T8951] RSP: 0018:ffffc9001876fb18 EFLAGS: 00010206
[  741.397416][ T8951] RAX: ffffffff8403e501 RBX: ffff8880ac000000 RCX: 0000000000200040
[  741.405396][ T8951] RDX: 0000000000400000 RSI: 0000000020200000 RDI: ffff8880ac1fffc0
[  741.413372][ T8951] RBP: ffffc9001876fc78 R08: dffffc0000000000 R09: ffffed1015880000
[  741.421350][ T8951] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000400000
[  741.429323][ T8951] R13: 00007ffffffff000 R14: 0000000020000040 R15: ffffc9001876fd48
[  741.437310][ T8951]  ? _copy_from_iter+0x2d1/0x1070
[  741.442354][ T8951]  _copy_from_iter+0x33c/0x1070
[  741.447229][ T8951]  ? _copy_mc_to_iter+0x1470/0x1470
[  741.452437][ T8951]  ? trace_kmalloc+0x2e/0xe0
[  741.457035][ T8951]  ? kmalloc_order_trace+0x41/0x70
[  741.462160][ T8951]  ? __virt_addr_valid+0x21b/0x2d0
[  741.467275][ T8951]  ? __check_object_size+0x2f3/0x3f0
[  741.472566][ T8951]  qrtr_tun_write_iter+0xe0/0x160
[  741.477601][ T8951]  vfs_write+0xa39/0xc90
[  741.481859][ T8951]  ? file_end_write+0x230/0x230
[  741.486738][ T8951]  ? __fdget_pos+0x1d8/0x2f0
[  741.491328][ T8951]  ? ksys_write+0x72/0x2a0
[  741.495751][ T8951]  ksys_write+0x171/0x2a0
[  741.500093][ T8951]  ? __ia32_sys_read+0x80/0x80
[  741.504864][ T8951]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  741.510845][ T8951]  ? lockdep_hardirqs_on+0x8d/0x130
[  741.516051][ T8951]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  741.522050][ T8951]  do_syscall_64+0x3d/0xb0
[  741.526477][ T8951]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  741.532405][ T8951] RIP: 0033:0x4665e9
[  741.536300][ T8951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  741.555907][ T8951] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  741.564330][ T8951] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  741.572301][ T8951] RDX: 0000000000400000 RSI: 0000000020000040 RDI: 0000000000000003
[  741.580272][ T8951] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  741.588244][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  741.596219][ T8951] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
[  741.688971][ T8961] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  741.709817][ T8961] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  741.727108][ T8964] loop4: detected capacity change from 0 to 6
14:08:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xf000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  741.772403][ T8964] FAT-fs (loop4): bogus logical sector size 4097
[  741.787969][ T8964] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:37 executing program 5 (fault-call:1 fault-nth:3):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  741.860371][ T8964] loop4: detected capacity change from 0 to 6
[  741.887621][ T8964] FAT-fs (loop4): bogus logical sector size 4097
[  741.917279][ T8964] FAT-fs (loop4): Can't find a valid FAT filesystem
[  741.966835][ T8976] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  741.976117][ T8978] FAULT_INJECTION: forcing a failure.
[  741.976117][ T8978] name failslab, interval 1, probability 0, space 0, times 0
[  742.005415][ T8976] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  742.022397][ T8978] CPU: 0 PID: 8978 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  742.031085][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  742.041143][ T8978] Call Trace:
[  742.044429][ T8978]  dump_stack_lvl+0x1d3/0x29f
[  742.049124][ T8978]  ? show_regs_print_info+0x12/0x12
[  742.054333][ T8978]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  742.060149][ T8978]  ? __fs_reclaim_acquire+0x30/0x30
[  742.065357][ T8978]  ? __might_sleep+0x100/0x100
14:08:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400188001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  742.070131][ T8978]  ? __alloc_pages+0x2fd/0x5f0
[  742.074907][ T8978]  should_fail+0x384/0x4b0
[  742.079336][ T8978]  ? ptlock_alloc+0x1c/0x60
[  742.083847][ T8978]  should_failslab+0x5/0x20
[  742.088362][ T8978]  kmem_cache_alloc+0x6b/0x340
[  742.093147][ T8978]  ptlock_alloc+0x1c/0x60
[  742.097480][ T8978]  pte_alloc_one+0xc3/0x320
[  742.101995][ T8978]  ? asan.module_ctor+0x10/0x10
[  742.106848][ T8978]  ? rcu_lock_release+0x5/0x20
[  742.111658][ T8978]  ? __lock_acquire+0x6100/0x6100
[  742.116702][ T8978]  do_huge_pmd_anonymous_page+0x686/0xce0
[  742.122436][ T8978]  ? count_memcg_event_mm+0x2f1/0x340
[  742.127820][ T8978]  ? vma_thp_gfp_mask+0x170/0x170
[  742.132862][ T8978]  handle_mm_fault+0x2143/0x2500
[  742.137834][ T8978]  ? numa_migrate_prep+0x190/0x190
[  742.142972][ T8978]  ? __init_rwsem+0x160/0x160
[  742.147661][ T8978]  ? vmacache_find+0x4ef/0x5d0
[  742.152432][ T8978]  ? vmacache_update+0x9f/0xf0
[  742.157210][ T8978]  do_user_addr_fault+0x8ce/0x10c0
[  742.162339][ T8978]  exc_page_fault+0xa1/0x1e0
[  742.166935][ T8978]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  742.173106][ T8978]  asm_exc_page_fault+0x1e/0x30
[  742.173545][ T8985] loop4: detected capacity change from 0 to 6
[  742.177959][ T8978] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  742.190646][ T8978] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8
[  742.210466][ T8978] RSP: 0018:ffffc9001881fb18 EFLAGS: 00010206
[  742.216539][ T8978] RAX: ffffffff8403e501 RBX: ffff8880ac000000 RCX: 0000000000200040
[  742.224515][ T8978] RDX: 0000000000400000 RSI: 0000000020200000 RDI: ffff8880ac1fffc0
[  742.232490][ T8978] RBP: ffffc9001881fc78 R08: dffffc0000000000 R09: ffffed1015880000
[  742.239496][ T8985] FAT-fs (loop4): bogus logical sector size 6144
[  742.240463][ T8978] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000400000
[  742.240479][ T8978] R13: 00007ffffffff000 R14: 0000000020000040 R15: ffffc9001881fd48
[  742.240501][ T8978]  ? _copy_from_iter+0x2d1/0x1070
[  742.267745][ T8978]  _copy_from_iter+0x33c/0x1070
[  742.271607][ T8985] FAT-fs (loop4): Can't find a valid FAT filesystem
[  742.272612][ T8978]  ? _copy_mc_to_iter+0x1470/0x1470
[  742.272643][ T8978]  ? trace_kmalloc+0x2e/0xe0
[  742.272662][ T8978]  ? kmalloc_order_trace+0x41/0x70
[  742.294088][ T8978]  ? __virt_addr_valid+0x21b/0x2d0
[  742.299219][ T8978]  ? __check_object_size+0x2f3/0x3f0
[  742.304515][ T8978]  qrtr_tun_write_iter+0xe0/0x160
[  742.309549][ T8978]  vfs_write+0xa39/0xc90
[  742.313805][ T8978]  ? file_end_write+0x230/0x230
[  742.318678][ T8978]  ? __fdget_pos+0x1d8/0x2f0
[  742.323275][ T8978]  ? ksys_write+0x72/0x2a0
[  742.327700][ T8978]  ksys_write+0x171/0x2a0
[  742.332039][ T8978]  ? __ia32_sys_read+0x80/0x80
[  742.336811][ T8978]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  742.342800][ T8978]  ? lockdep_hardirqs_on+0x8d/0x130
[  742.348013][ T8978]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  742.354003][ T8978]  do_syscall_64+0x3d/0xb0
[  742.358435][ T8978]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  742.364335][ T8978] RIP: 0033:0x4665e9
[  742.368235][ T8978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  742.387843][ T8978] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  742.396257][ T8978] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  742.404235][ T8978] RDX: 0000000000400000 RSI: 0000000020000040 RDI: 0000000000000003
[  742.412211][ T8978] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  742.420185][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  742.428160][ T8978] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
14:08:38 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
io_setup(0xfffffffd, &(0x7f0000000080)=<r2=>0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
io_setup(0x7, &(0x7f0000000540))
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x40181, 0x0)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
io_submit(r2, 0x3, &(0x7f0000000980)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000000780)="935c37104d6b9835e0752205462b1b75c97665d024df3f8f7482cc459012c54de0094f36d111e28ce08542a8203090d7f6c7a63d63ba5e6f0ddc2e76081795378a7057dbfba71c344ebc48b7bdfff269d2b56ce0f7628af2587204567288ee09a6a6f81526d3f0724f589fcf463df9a4392156cdb67b10446ad4fbfa99891768cbc11ddf0f7ce72749bc64597c4f569c91dd1a1d48aebb042667", 0x9a, 0xffff, 0x0, 0x1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000880)="1f874c260a75b5ebc5e4fd398d", 0xd, 0xfffffffffffffff9}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f0000000900)="77b5e5eb5034667a", 0x8, 0x10001, 0x0, 0x2}])
io_submit(r2, 0x4, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x7ff, r3, &(0x7f00000000c0)="1036f3e47625b44d830c91833026080cb812fb1f3769e2ab94f05af0daa181e77c3f71d3c782f959e6011480d27ace848e78ce7b9bdb06bc02f24c525f1e886274c053789060231f42b02ba060589aca70b436ffddb748117bada8a89c29b49fd8cb6d2df53adb74069b7ce21908c1ad29ad51f4621dbf45f37f5d97ac3b6ffae8db7b3c5b15a7da8a9d9488db6bc0ba02c2c2aed87c744a0516b93c8aa80e2f256218145c5765d2cf893402d734b9a89192e631dabe2548fdce836c5e4fd7", 0xbf, 0x59f2, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0xbf72, r1, &(0x7f00000001c0)="f94edc87a5a14b98ee35d5a4d7c11cbacc1707ddc427ef4aec701575970c969a320ab48ea77eabdfafd0727c7b4f57b2da307f756332b36f0d6f597e68367a07cefeb62872c04607a47bebd0829c20edcd1d5557e9db53e3584cd4cf77d5654f303dd832a783e5c7eac41d0bbb2a65decbca81b59814979d9091f063ff3ee217f9d30a04a4499263203371f4a7d9f900e5b21081778772f2091786fc57", 0x9d, 0x10000, 0x0, 0x2, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000300)="1e0521cceaaee22c1cbd0dae109dd51ab89988583cd4ec9dbcc43cbeaa0f9e2d934983b499a420904a94c2b947945b71320ec063c6f16b", 0x37, 0x5, 0x0, 0x0, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x20, r6, &(0x7f00000003c0)="ee3373f02000a290018ea6cccc95e0025b0f8dbd73df43a7230c234e89daf9095e4135789d814174eab89b817f5103d8d3dc8709d7c833e73bd29d3eb93303ba444244a8f27d6d45c0bcb591a69308aef6f06a4c815beb7ae963ff7e8802533232dbf42006f8d52ff5ed015fcf", 0x6d, 0x4, 0x0, 0x3}])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x50, r1, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000740)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="7eb73cdfee80765d2e0ae11632366f8154b6ccfd6a514f79abb4c29330e5f11e3f11d6c7a855b46beb6be3bf1db09539b1fed27a0178e4f9a5d2ac4bfd3fb1b9819bda60458e5c6e4e1652038a27520bb86b0fbfd7", 0x55, 0xfff}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x81, r1, &(0x7f0000000640)="958d2ebc8f61c49f443f172e8964d190f4c72e85b28c89b94c6fda195698a9e169e4003949b98ecfae5e6dffffbee8218bc036954ee84821efd7e056eb9415259c3ce88e4cff8b2bed718c665df3d843df86b2705d57f7a50812bc1d3c3bf21f157f5e06c4ca0f0ac57c0485676c62dc867172938e01fa2c8ea0489caef72de4a9e78edf7262a7cf24ee8381f003d473f697909078ea", 0x96, 0x3a, 0x0, 0x3}])
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r7 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {0xfffffffd}})
read$fb(r7, &(0x7f00000004c0)=""/89, 0x59)

[  742.494900][ T8985] loop4: detected capacity change from 0 to 6
[  742.539100][ T8985] FAT-fs (loop4): bogus logical sector size 6144
[  742.565014][ T8985] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:38 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)={0x12c0, r2, 0x600, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x1254, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c28f3e42bbe19d124e80c467424ed45e8c5a6781080c84a270e1038390a6f7d7"}, @WGPEER_A_FLAGS={0x8}]}, {0x638, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x4}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5b31}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0xfe29, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x82}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a5931dd741a0bf1e50e6368bba81bc7798ed185ea5f99a50dc9341a8184347fe"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3ef, @private1, 0x2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc3}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa090102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x3b0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x1d8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x160, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "272b4647c86f10e64294132628f261477613575eb25cd023d3e78da4d1f04368"}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "82923d472559cedcc82105d4a4f58274dd55a548b52bf9f560ccee4acca2209b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x254, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1f0, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20ffcfa7a335925062cc206d0b3d1bc910cd452b4c4d3312865f77af44dfaa5d"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xe9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}}]}, {0x528, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x1e0, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x9}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3cea66f248f8f9c1a3918fc9e6db3d01eb90d08b23fee730bde49148dccbf03f"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x24c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x81}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2, 0x8001}}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x10000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400208001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:38 executing program 5 (fault-call:1 fault-nth:4):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  742.872235][ T9009] FAULT_INJECTION: forcing a failure.
[  742.872235][ T9009] name fail_page_alloc, interval 1, probability 0, space 0, times 0
14:08:38 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00007e0000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r1, 0x45b52000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x12001)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  742.920934][ T9014] loop4: detected capacity change from 0 to 6
[  742.964465][ T9009] CPU: 0 PID: 9009 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  742.973175][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  742.983220][ T9009] Call Trace:
[  742.986489][ T9009]  dump_stack_lvl+0x1d3/0x29f
[  742.991171][ T9009]  ? show_regs_print_info+0x12/0x12
[  742.996357][ T9009]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  743.002064][ T9009]  ? __fs_reclaim_acquire+0x30/0x30
[  743.007250][ T9009]  ? rcu_read_lock_sched_held+0x87/0x110
[  743.012877][ T9009]  should_fail+0x384/0x4b0
[  743.017287][ T9009]  prepare_alloc_pages+0x1d1/0x5a0
[  743.022396][ T9009]  __alloc_pages+0x14d/0x5f0
[  743.026979][ T9009]  ? __rmqueue_pcplist+0x2030/0x2030
[  743.032261][ T9009]  ? alloc_pages+0x3f3/0x500
[  743.036855][ T9009]  pte_alloc_one+0x7f/0x320
[  743.041343][ T9009]  ? asan.module_ctor+0x10/0x10
[  743.046177][ T9009]  ? rcu_lock_release+0x5/0x20
[  743.050929][ T9009]  ? __lock_acquire+0x6100/0x6100
[  743.055950][ T9009]  do_huge_pmd_anonymous_page+0x686/0xce0
[  743.061657][ T9009]  ? count_memcg_event_mm+0x2f1/0x340
[  743.067017][ T9009]  ? vma_thp_gfp_mask+0x170/0x170
[  743.072033][ T9009]  handle_mm_fault+0x2143/0x2500
[  743.076979][ T9009]  ? numa_migrate_prep+0x190/0x190
[  743.082094][ T9009]  ? __init_rwsem+0x160/0x160
[  743.086756][ T9009]  ? vmacache_find+0x529/0x5d0
[  743.091519][ T9009]  do_user_addr_fault+0x8ce/0x10c0
[  743.096641][ T9009]  exc_page_fault+0xa1/0x1e0
[  743.101240][ T9009]  asm_exc_page_fault+0x1e/0x30
[  743.106082][ T9009] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  743.112659][ T9009] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8
[  743.132252][ T9009] RSP: 0018:ffffc9001888fb18 EFLAGS: 00010206
[  743.138314][ T9009] RAX: ffffffff8403e501 RBX: ffff8880ac000000 RCX: 0000000000000040
[  743.146271][ T9009] RDX: 0000000000400000 RSI: 0000000020400000 RDI: ffff8880ac3fffc0
[  743.154246][ T9009] RBP: ffffc9001888fc78 R08: dffffc0000000000 R09: ffffed1015880000
[  743.162239][ T9009] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000400000
[  743.170213][ T9009] R13: 00007ffffffff000 R14: 0000000020000040 R15: ffffc9001888fd48
[  743.178202][ T9009]  ? _copy_from_iter+0x2d1/0x1070
[  743.183228][ T9009]  _copy_from_iter+0x33c/0x1070
[  743.188078][ T9009]  ? _copy_mc_to_iter+0x1470/0x1470
[  743.193270][ T9009]  ? trace_kmalloc+0x2e/0xe0
[  743.197854][ T9009]  ? kmalloc_order_trace+0x41/0x70
[  743.202958][ T9009]  ? __virt_addr_valid+0x21b/0x2d0
[  743.208066][ T9009]  ? __check_object_size+0x2f3/0x3f0
[  743.213348][ T9009]  qrtr_tun_write_iter+0xe0/0x160
[  743.218364][ T9009]  vfs_write+0xa39/0xc90
[  743.222611][ T9009]  ? file_end_write+0x230/0x230
[  743.227477][ T9009]  ? __fdget_pos+0x1d8/0x2f0
[  743.232050][ T9009]  ? ksys_write+0x72/0x2a0
[  743.236457][ T9009]  ksys_write+0x171/0x2a0
[  743.240776][ T9009]  ? __ia32_sys_read+0x80/0x80
[  743.245530][ T9009]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  743.251495][ T9009]  ? lockdep_hardirqs_on+0x8d/0x130
[  743.256692][ T9009]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  743.262660][ T9009]  do_syscall_64+0x3d/0xb0
[  743.267070][ T9009]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  743.272954][ T9009] RIP: 0033:0x4665e9
[  743.276836][ T9009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  743.296438][ T9009] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  743.304838][ T9009] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  743.312794][ T9009] RDX: 0000000000400000 RSI: 0000000020000040 RDI: 0000000000000003
[  743.320748][ T9009] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  743.328700][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  743.336655][ T9009] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
[  743.377196][ T9014] FAT-fs (loop4): bogus logical sector size 8192
[  743.405068][ T9014] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x11000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:39 executing program 5 (fault-call:1 fault-nth:5):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  743.499710][ T9014] loop4: detected capacity change from 0 to 6
[  743.521054][ T9014] FAT-fs (loop4): bogus logical sector size 8192
[  743.553407][ T9014] FAT-fs (loop4): Can't find a valid FAT filesystem
[  743.593367][ T9028] FAULT_INJECTION: forcing a failure.
[  743.593367][ T9028] name failslab, interval 1, probability 0, space 0, times 0
[  743.632795][ T9027] kvm_mmu_after_set_cpuid: 1 callbacks suppressed
[  743.632811][ T9027] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  743.657437][ T9028] CPU: 0 PID: 9028 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  743.666131][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  743.676192][ T9028] Call Trace:
14:08:39 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  743.679478][ T9028]  dump_stack_lvl+0x1d3/0x29f
[  743.684172][ T9028]  ? show_regs_print_info+0x12/0x12
[  743.689380][ T9028]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  743.695112][ T9028]  ? __fs_reclaim_acquire+0x30/0x30
[  743.700337][ T9028]  ? __might_sleep+0x100/0x100
[  743.705105][ T9028]  ? __alloc_pages+0x2fd/0x5f0
[  743.709886][ T9028]  should_fail+0x384/0x4b0
[  743.714316][ T9028]  ? ptlock_alloc+0x1c/0x60
[  743.718827][ T9028]  should_failslab+0x5/0x20
[  743.723339][ T9028]  kmem_cache_alloc+0x6b/0x340
[  743.728119][ T9028]  ptlock_alloc+0x1c/0x60
14:08:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174003f8001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  743.732451][ T9028]  pte_alloc_one+0xc3/0x320
[  743.736961][ T9028]  ? asan.module_ctor+0x10/0x10
[  743.741812][ T9028]  ? rcu_lock_release+0x5/0x20
[  743.746573][ T9028]  ? __lock_acquire+0x6100/0x6100
[  743.751625][ T9028]  do_huge_pmd_anonymous_page+0x686/0xce0
[  743.757356][ T9028]  ? count_memcg_event_mm+0x2f1/0x340
[  743.762734][ T9028]  ? vma_thp_gfp_mask+0x170/0x170
[  743.767771][ T9028]  handle_mm_fault+0x2143/0x2500
[  743.772740][ T9028]  ? numa_migrate_prep+0x190/0x190
[  743.777864][ T9028]  ? __init_rwsem+0x160/0x160
[  743.782542][ T9028]  ? vmacache_find+0x529/0x5d0
[  743.787317][ T9028]  do_user_addr_fault+0x8ce/0x10c0
[  743.792452][ T9028]  exc_page_fault+0xa1/0x1e0
[  743.797050][ T9028]  asm_exc_page_fault+0x1e/0x30
[  743.801899][ T9028] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  743.808494][ T9028] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8
[  743.828100][ T9028] RSP: 0018:ffffc900017dfb18 EFLAGS: 00010206
[  743.834171][ T9028] RAX: ffffffff8403e501 RBX: ffff8880ac000000 RCX: 0000000000000040
[  743.842146][ T9028] RDX: 0000000000400000 RSI: 0000000020400000 RDI: ffff8880ac3fffc0
[  743.850201][ T9028] RBP: ffffc900017dfc78 R08: dffffc0000000000 R09: ffffed1015880000
[  743.858173][ T9028] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000400000
[  743.866146][ T9028] R13: 00007ffffffff000 R14: 0000000020000040 R15: ffffc900017dfd48
[  743.874136][ T9028]  ? _copy_from_iter+0x2d1/0x1070
[  743.879180][ T9028]  _copy_from_iter+0x33c/0x1070
[  743.884057][ T9028]  ? _copy_mc_to_iter+0x1470/0x1470
[  743.889268][ T9028]  ? trace_kmalloc+0x2e/0xe0
[  743.893856][ T9028]  ? kmalloc_order_trace+0x41/0x70
[  743.898974][ T9028]  ? __virt_addr_valid+0x21b/0x2d0
[  743.904091][ T9028]  ? __check_object_size+0x2f3/0x3f0
[  743.909386][ T9028]  qrtr_tun_write_iter+0xe0/0x160
[  743.914422][ T9028]  vfs_write+0xa39/0xc90
[  743.918678][ T9028]  ? file_end_write+0x230/0x230
[  743.923550][ T9028]  ? __fdget_pos+0x1d8/0x2f0
[  743.928243][ T9028]  ? ksys_write+0x72/0x2a0
[  743.932670][ T9028]  ksys_write+0x171/0x2a0
[  743.937007][ T9028]  ? __ia32_sys_read+0x80/0x80
[  743.941777][ T9028]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  743.948199][ T9028]  ? lockdep_hardirqs_on+0x8d/0x130
[  743.953402][ T9028]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  743.959391][ T9028]  do_syscall_64+0x3d/0xb0
[  743.963815][ T9028]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  743.969716][ T9028] RIP: 0033:0x4665e9
[  743.973709][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  743.993316][ T9028] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  744.001729][ T9028] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  744.009702][ T9028] RDX: 0000000000400000 RSI: 0000000020000040 RDI: 0000000000000003
[  744.017672][ T9028] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  744.025640][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.033610][ T9028] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
[  744.070792][ T9027] kvm_mmu_after_set_cpuid: 1 callbacks suppressed
[  744.070805][ T9027] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  744.164742][ T9041] loop4: detected capacity change from 0 to 6
[  744.240565][ T9041] FAT-fs (loop4): bogus logical sector size 16128
[  744.263422][ T9041] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x12000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:40 executing program 5 (fault-call:1 fault-nth:6):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:40 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r2 = openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x480801, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x90, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x7e}, 0x2, 0x20, @device_a, 0x6, 0x5, 0x2}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
fcntl$notify(0xffffffffffffffff, 0x402, 0x19)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="3804001a", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  744.330255][ T9041] loop4: detected capacity change from 0 to 6
[  744.347778][ T9041] FAT-fs (loop4): bogus logical sector size 16128
[  744.361100][ T9041] FAT-fs (loop4): Can't find a valid FAT filesystem
[  744.435666][ T9051] FAULT_INJECTION: forcing a failure.
[  744.435666][ T9051] name failslab, interval 1, probability 0, space 0, times 0
14:08:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400408001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  744.483308][ T9054] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  744.495790][ T9051] CPU: 0 PID: 9051 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  744.504495][ T9051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  744.514557][ T9051] Call Trace:
[  744.517748][ T9054] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  744.517839][ T9051]  dump_stack_lvl+0x1d3/0x29f
[  744.530999][ T9051]  ? show_regs_print_info+0x12/0x12
[  744.536212][ T9051]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  744.541943][ T9051]  ? exc_page_fault+0xe0/0x1e0
[  744.546714][ T9051]  ? lockdep_hardirqs_on+0x8d/0x130
[  744.551925][ T9051]  ? exc_page_fault+0xe0/0x1e0
[  744.556694][ T9051]  should_fail+0x384/0x4b0
[  744.561126][ T9051]  ? __alloc_skb+0xd8/0x580
[  744.565641][ T9051]  should_failslab+0x5/0x20
[  744.570155][ T9051]  kmem_cache_alloc_node+0x6e/0x370
[  744.575362][ T9051]  ? _copy_from_iter+0x2d1/0x1070
[  744.580404][ T9051]  __alloc_skb+0xd8/0x580
[  744.584742][ T9051]  ? _copy_from_iter+0x41a/0x1070
[  744.589783][ T9051]  __netdev_alloc_skb+0xf6/0x4b0
[  744.594729][ T9051]  ? napi_skb_cache_get+0x1e0/0x1e0
[  744.599941][ T9051]  ? _copy_mc_to_iter+0x1470/0x1470
[  744.605154][ T9051]  ? trace_kmalloc+0x2e/0xe0
[  744.609748][ T9051]  ? kmalloc_order_trace+0x41/0x70
[  744.614876][ T9051]  qrtr_endpoint_post+0x7a/0x1340
[  744.619914][ T9051]  ? __check_object_size+0x2f3/0x3f0
[  744.625211][ T9051]  qrtr_tun_write_iter+0x106/0x160
[  744.630327][ T9051]  vfs_write+0xa39/0xc90
[  744.634578][ T9051]  ? file_end_write+0x230/0x230
[  744.639448][ T9051]  ? __fdget_pos+0x1d8/0x2f0
[  744.644039][ T9051]  ? ksys_write+0x72/0x2a0
[  744.648492][ T9051]  ksys_write+0x171/0x2a0
[  744.652828][ T9051]  ? __ia32_sys_read+0x80/0x80
[  744.657602][ T9051]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  744.663590][ T9051]  ? lockdep_hardirqs_on+0x8d/0x130
[  744.668823][ T9051]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  744.674812][ T9051]  do_syscall_64+0x3d/0xb0
[  744.679241][ T9051]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  744.685170][ T9051] RIP: 0033:0x4665e9
[  744.689069][ T9051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  744.708677][ T9051] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  744.717095][ T9051] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  744.725069][ T9051] RDX: 0000000000400000 RSI: 0000000020000040 RDI: 0000000000000003
[  744.733046][ T9051] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  744.741018][ T9051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.749002][ T9051] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
14:08:40 executing program 5 (fault-call:1 fault-nth:7):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x14000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  744.934651][ T9068] loop4: detected capacity change from 0 to 6
[  744.979932][ T9068] FAT-fs (loop4): bogus logical sector size 16384
[  745.007453][ T9068] FAT-fs (loop4): Can't find a valid FAT filesystem
[  745.029709][ T9072] FAULT_INJECTION: forcing a failure.
[  745.029709][ T9072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  745.104182][ T9072] CPU: 1 PID: 9072 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  745.109411][ T9074] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  745.112895][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  745.112910][ T9072] Call Trace:
[  745.112919][ T9072]  dump_stack_lvl+0x1d3/0x29f
[  745.112947][ T9072]  ? show_regs_print_info+0x12/0x12
[  745.112967][ T9072]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  745.112984][ T9072]  ? __might_fault+0xb8/0x110
[  745.113007][ T9072]  ? snprintf+0xc0/0x110
[  745.113029][ T9072]  should_fail+0x384/0x4b0
[  745.113055][ T9072]  _copy_to_user+0x2d/0x130
[  745.113076][ T9072]  simple_read_from_buffer+0xd9/0x160
[  745.113100][ T9072]  proc_fail_nth_read+0x195/0x210
[  745.113123][ T9072]  ? proc_fault_inject_write+0x370/0x370
[  745.113144][ T9072]  ? __mutex_lock_common+0x570/0x3770
[  745.113167][ T9072]  ? rw_verify_area+0x1b8/0x370
[  745.113183][ T9072]  ? fsnotify_perm+0x2fd/0x4d0
[  745.113199][ T9072]  ? proc_fault_inject_write+0x370/0x370
[  745.113220][ T9072]  vfs_read+0x294/0xc20
[  745.113237][ T9072]  ? rcu_lock_release+0x9/0x20
[  745.113253][ T9072]  ? __lock_acquire+0x6100/0x6100
[  745.142721][ T9074] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  745.144316][ T9072]  ? kernel_read+0x70/0x70
[  745.144354][ T9072]  ? __fget_files+0x35a/0x390
[  745.144380][ T9072]  ? mutex_lock_nested+0x1a/0x20
[  745.202973][ T9068] loop4: detected capacity change from 0 to 6
[  745.204582][ T9072]  ? __fdget_pos+0x24e/0x2f0
[  745.204608][ T9072]  ? ksys_read+0x72/0x2a0
[  745.204631][ T9072]  ksys_read+0x171/0x2a0
[  745.204651][ T9072]  ? vfs_write+0xc90/0xc90
[  745.227889][ T9068] FAT-fs (loop4): bogus logical sector size 16384
[  745.231457][ T9072]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  745.231484][ T9072]  ? lockdep_hardirqs_on+0x8d/0x130
[  745.231509][ T9072]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  745.231529][ T9072]  do_syscall_64+0x3d/0xb0
[  745.231550][ T9072]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  745.231570][ T9072] RIP: 0033:0x41936c
[  745.231587][ T9072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  745.231602][ T9072] RSP: 002b:00007f0eee3b9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  745.231623][ T9072] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041936c
[  745.231636][ T9072] RDX: 000000000000000f RSI: 00007f0eee3b91e0 RDI: 0000000000000004
[  745.231647][ T9072] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  745.231658][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  745.231669][ T9072] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
14:08:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x17000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:41 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = perf_event_open(&(0x7f0000003640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r3=>0x0, <r4=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r4, 0x0, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r5]}, @devid})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00')
preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000480)=""/1, 0x1}], 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1, 0xfffffffb, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYRESOCT, @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000001c0)={r7, 0x1bef, 0x20, 0x1})
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r9 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$FITHAW(r9, 0xc0045878)

14:08:41 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)={0x1fc, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6d, 0x2a, [@preq={0x82, 0x67, @not_ext={{0x1}, 0x20, 0xfc, 0x1f, @device_b, 0x1, "", 0x6, 0x1, 0x7, [{{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @device_a, 0x1}, {{}, @broadcast, 0x4d5}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{}, @broadcast, 0x3f}, {{0x1}, @device_b, 0x73}]}}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @peer_mgmt={0x75, 0x16, {0x0, 0xa6, @val=0x1, @void, @val="c3000000000000c200006abda4bb00"}}, @ssid={0x0, 0x7, @random="80a58965aea58e"}, @random_vendor={0xdd, 0x46, "11399bd7ae23682ecb3f358241b4e8b5b7feab2f8df8e14adb9344098381608141dabb13fb467a355076db3ab1f22250e8fab7c233d041bb513846c45a1c0153da4a064d4978"}, @rann={0x7e, 0x15, {{0x1, 0x1f}, 0x4, 0xa9, @device_a, 0x6, 0x1}}, @random_vendor={0xdd, 0x9b, "87ad246fc75e2cb18a5921cd3ed05cec2f31df390a7a7f56ff798a2c86a3d69a09dbc6b663cca26053078cc7d74b47f2d8df2283c66d8ad11439c8c2213bf53eeeec03effd14dfd70c6f885cdb2aaf069a7abcd075d1f9c1b468c2541321f42c5acf3df844aac110747deb59c608bdc82404331f3205e1ac595c30fb88a7ec6f5b3fac0053506f47de29d5903d51e0b0d6aa24e95e57139a97d19b"}, @ht={0x2d, 0x1a, {0x1, 0x2, 0x2, 0x0, {0x4, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x2, 0x4}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={'\x00', @ifru_addrs=@ethernet})

[  745.669146][ T9094] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  745.695712][ T9094] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x18000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  745.909973][ T9068] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:41 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617404408001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:42 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x52, r1, 0xc75fa000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
dup2(r1, r1)

[  746.149584][ T9123] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  746.168188][ T9123] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  746.209735][ T9133] loop4: detected capacity change from 0 to 6
14:08:42 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="04212139", 0x400000)

[  746.253515][ T9133] FAT-fs (loop4): bogus logical sector size 16388
[  746.284429][ T9133] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:42 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r2, r3, 0x0)
io_setup(0x3f, &(0x7f0000000080)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}])
r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0)
preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendto$inet(r8, &(0x7f0000000540)="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", 0x1000, 0x1, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r9 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x7}})
io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x2, r6, &(0x7f00000000c0)="09f87129d3cbce6d2fba0a6f111dc9b7fff8b209746f7bfc9e5dbd541b5dae8333d0934b99e30ec524f8be243390559bd7a77eb5e5de8a2b580847199947f1a38248a3d30a12582881b8cd0f9348051061ad670f4db3b574d345", 0x5a, 0xff, 0x0, 0x2, r7}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2, r9, &(0x7f0000000180)="8a4becad8b409318571a688252c38e02e4601c050e7f634e07663af8de8f3d623b72f25d6cd56e20abb41950a1e72290b91e04182ee415a29b57fdf80b7f2afe8d88b753f41e0041092739fcb52127dea66d91d50bf588d10ddcd6eb3cdaffbad1b1ca0dbe1c7189db4414bcf20f62e84602c8745bc90b73a5e08e28c1e4bda315c94268c3a53a9a576f81f1cf0f8bebd6dd76d3b4712037b59d16604fa0b2ab61e646262eb3d310778686189671b36e5957e1cb7e41fc78494b69fed8076a04f69fa29fb1fb4b8c58b387a93a655731286fe6", 0xd3, 0x5, 0x0, 0x2}])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x19000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  746.360409][ T9133] loop4: detected capacity change from 0 to 6
[  746.383514][ T9133] FAT-fs (loop4): bogus logical sector size 16388
[  746.420190][ T9133] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:42 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400002)

14:08:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400648001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:42 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x104)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
bind(r2, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xd9, @remote}, 0x80)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:42 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000080), 0x0, 0xd9e, 0x20)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:42 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400003)

[  746.619101][ T9154] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  746.620449][ T9163] loop4: detected capacity change from 0 to 6
[  746.650405][ T9154] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  746.694049][ T9163] FAT-fs (loop4): bogus logical sector size 25600
14:08:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1a000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:42 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400004)

[  746.747516][ T9163] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:42 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="03212139", 0x4)

[  746.850159][ T9163] loop4: detected capacity change from 0 to 6
[  746.873141][ T3256] ieee802154 phy0 wpan0: encryption failed: -22
[  746.877731][ T9163] FAT-fs (loop4): bogus logical sector size 25600
[  746.879543][ T3256] ieee802154 phy1 wpan1: encryption failed: -22
14:08:42 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400010)

[  746.925479][ T9163] FAT-fs (loop4): Can't find a valid FAT filesystem
[  746.951959][ T9181] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  746.974422][ T9181] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:42 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000000c0)={0x7, 0x0, [0x8000, 0x1000, 0x4], &(0x7f0000000080)})
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000080)={0x43a, 0x5})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000500)={0x0, 0x1, 0x10001, 0x1})
r5 = signalfd(r0, &(0x7f00000001c0)={[0x80000000]}, 0x8)
write$binfmt_elf64(r5, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x40, 0x40, 0x2, 0x10001, 0x3, 0x3, 0x2, 0x272, 0x40, 0x66, 0x10001, 0xa4b, 0x38, 0x1, 0x91, 0xffff, 0x7}, [{0x2, 0xfff, 0x1, 0x1, 0x100, 0x61b, 0x5, 0x8}, {0x70000005, 0x2, 0x40, 0x8, 0x2, 0x3, 0x401, 0x400}], "c260b49f09bb444b8722189035d219266a14ca85d896e4da801bef7f6a5a3878e702dd488d29858501311038335fafed851b3d3678690d0af9ea19c7f67e810df7f0ac3b68d492e1704642f37b2782c4238a04d6fbae45eada7f00bdac630785924ce71786f7ad985a276c76b18ff2278c82ee1b1070b0552386883a81fcdb191b03c49d0779b88e9edad91d8a4a84b5362ed392550fd2eb2327fc73fbae32263a0d1be7c3ec320c666e05054e0e1a2f33ab39e0d00449bf7c2ae3ca80f8f7031e73da277907978a901e3d83e86c37cd790e7fd6", ['\x00']}, 0x284)

14:08:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400040001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:43 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400041)

14:08:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1d000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:43 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f0000000080)="e0d6c164d9fe68ca9024a898fc37c0d3d87d1a884a105f25673652c7326b2a09f58927da87ee0b6198d89f32c17f8303f8ce8f74e2fb9f6d54bb5c22a74ad2809ae47e5753b7b62639a9bcb0f1bcded3eaf40bf1096dd9496394f094bde293b09c768478d4d6ffda207f3d00206b86a0a6a2a8948faa803fde10adc4885bef989e5bda126522d3c9cdac9344a2c784f89c6c7bb6712b6d9945958a5a58e4c5bdaee4976b5e60318c0a8e2553e304686ee66b4fb21993a01df4090e79e4108818e01f630cb9dee3c50f4e1b0c618400ae9431ac44aa0ac33cffb1292432798a6ff7aba179224569d9a65e4dc41a2ad905b6f75b5910f7", 0xf6)

[  747.205241][ T9205] loop4: detected capacity change from 0 to 6
[  747.249390][ T9205] FAT-fs (loop4): bogus sectors per cluster 0
[  747.275539][ T9205] FAT-fs (loop4): Can't find a valid FAT filesystem
[  747.284559][ T9206] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  747.307766][ T9206] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  747.361338][ T9205] loop4: detected capacity change from 0 to 6
[  747.376994][ T9205] FAT-fs (loop4): bogus sectors per cluster 0
[  747.403769][ T9205] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400038001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:43 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400300)

14:08:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1e000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:43 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x20)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f000036f000/0x1000)=nil, 0x1000, 0x3, 0x13, r2, 0x9118b000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f00000001c0)="fafeb71b8711335238cda4985c677013b7c7c5029b7e2e2e4e750b9141af2a4c85501ced9949feddb5ce9cbb3cc6c93be8f212d5f49ae71d2a126f63db47f6c7ad234612792ffdad784f9c9605ef3e7d48b53e87508b7c00d8b798becff931dcb68554fecac9f87ff181c784d3caf4bfa1e4bf2617b356f82af5c6bdedb80d2f964e971fd18f38d8b9f60e6674dd000cc02be8f3b5b33bfa3b1caeb30178b413e41f13ef95e4588cfa002da161f607bdeda5b58441f3d486c5b64e793a1af6f8c972997af741e226258e7934", 0xcc)

14:08:43 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff000004005f000a00060050505050505000000a000600505050505050000004005f000600360003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff8305000000e8f42786", @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x88}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x80c0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  747.629259][ T9231] loop4: detected capacity change from 0 to 6
[  747.657435][ T9230] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  747.666300][ T9235] qrtr: Invalid version 250
[  747.675706][ T9231] FAT-fs (loop4): bogus logical sector size 768
[  747.689476][ T9230] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  747.700351][ T9231] FAT-fs (loop4): Can't find a valid FAT filesystem
[  747.718038][ T9240] qrtr: Invalid version 250
14:08:43 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x402000)

14:08:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1f000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:43 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fsync(r1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  747.783228][ T9231] loop4: detected capacity change from 0 to 6
[  747.798729][ T9231] FAT-fs (loop4): bogus logical sector size 768
[  747.812105][ T9231] FAT-fs (loop4): Can't find a valid FAT filesystem
[  747.871067][ T9250] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  747.885815][ T9250] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:43 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x404000)

14:08:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400048001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1f000080}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:43 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
accept$alg(r0, 0x0, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000040)="03212139", 0x4)

14:08:43 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x404100)

[  748.061357][ T9266] loop4: detected capacity change from 0 to 6
[  748.087348][ T9266] FAT-fs (loop4): Directory bread(block 3) failed
[  748.097466][ T9266] FAT-fs (loop4): Directory bread(block 4) failed
14:08:44 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x20400040)

14:08:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400058001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:44 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
preadv(r0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/175, 0xaf}, {&(0x7f0000001680)=""/138, 0x8a}, {&(0x7f0000001740)=""/85, 0x55}], 0x3, 0x18a211a6, 0xff)
preadv(r0, &(0x7f0000001540)=[{&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000001140)=""/204, 0xcc}, {&(0x7f0000001240)=""/113, 0x71}, {&(0x7f00000012c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/241, 0xf1}, {&(0x7f0000001440)=""/250, 0xfa}], 0x6, 0x5, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_complete(0x0)
getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000001800), &(0x7f0000001840)=0x4)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001880)=<r3=>0x0)
process_vm_writev(r3, &(0x7f00000019c0)=[{&(0x7f00000018c0)=""/228, 0xe4}], 0x1, &(0x7f0000002000)=[{&(0x7f0000001a00)=""/146, 0x92}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/215, 0xd7}, {&(0x7f0000001cc0)=""/211, 0xd3}, {&(0x7f0000001dc0)=""/35, 0x23}, {&(0x7f0000001e00)=""/209, 0xd1}, {&(0x7f0000001f00)=""/150, 0x96}, {&(0x7f0000001fc0)=""/6, 0x6}], 0x8, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000000c0)={{r5}, 0x0, 0x10, @unused=[0x2, 0x81, 0x3, 0xbb], @subvolid=0xfdc1})

[  748.353664][ T9292] loop4: detected capacity change from 0 to 6
[  748.372261][ T9292] FAT-fs (loop4): bogus logical sector size 1280
[  748.379409][ T9292] FAT-fs (loop4): Can't find a valid FAT filesystem
[  748.462448][ T9292] loop4: detected capacity change from 0 to 6
[  748.484106][ T9292] FAT-fs (loop4): bogus logical sector size 1280
[  748.498926][ T9292] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0x4)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x20000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:44 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x7ffff000)

14:08:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400068001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  748.667290][ T9307] kvm_mmu_after_set_cpuid: 1 callbacks suppressed
[  748.667306][ T9307] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:44 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0xffffffffffffffff)

[  748.709419][ T9313] loop4: detected capacity change from 0 to 6
[  748.767203][ T9313] FAT-fs (loop4): bogus logical sector size 1536
[  748.792478][ T9313] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x25000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:44 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
read$qrtrtun(r0, &(0x7f0000000200)=""/78, 0x4e)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x4, 0x1, 0x4, 0x10, 0x4, {r2, r3/1000+60000}, {0x3, 0xc, 0x6, 0x3, 0x7f, 0x6, "bf2d2ffa"}, 0x9, 0x3, @userptr=0xffffffffffffffc1, 0x80000001, 0x0, <r4=>0xffffffffffffffff})
ppoll(&(0x7f0000000140)=[{r1, 0x4020}, {r0, 0x1100}, {r4, 0x84}, {r0, 0x11010}, {r0, 0x40}], 0x5, &(0x7f0000000180), &(0x7f00000001c0)={[0x7]}, 0x8)

[  748.871410][ T9313] loop4: detected capacity change from 0 to 6
[  748.884807][ T9313] FAT-fs (loop4): bogus logical sector size 1536
[  748.945725][ T9313] FAT-fs (loop4): Can't find a valid FAT filesystem
[  748.990235][ T9330] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400078001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x3f000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  749.170278][ T9347] loop4: detected capacity change from 0 to 6
[  749.200906][ T9347] FAT-fs (loop4): bogus logical sector size 1792
[  749.215674][ T9348] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  749.228916][ T9347] FAT-fs (loop4): Can't find a valid FAT filesystem
[  749.245545][ T9348] kvm_mmu_after_set_cpuid: 3 callbacks suppressed
[  749.245559][ T9348] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:45 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000080))

[  749.349135][ T9347] loop4: detected capacity change from 0 to 6
[  749.384578][ T9347] FAT-fs (loop4): bogus logical sector size 1792
[  749.428530][ T9347] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x40000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:45 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
write$qrtrtun(r1, &(0x7f0000000080)="48f93683068c0a84a15c175fedf2d65058a83d0bfcd43258614df6f96470a92062282499ece299a6ccbdb5f21c5815f9b4debba823a60d3e6c68302d781862333eab3b5637059ac519bb6c1e75ab8ba1e95001a3d80897e806b2c5543dd64bb9fa9065092c2995f28de49ca56d7a1f0d7eead5c4f8892ddb803a15a313470e6338796bbee21cdbda8c35bca5fa50293d7eae3ff7681d995295b8718a5c8967b552d4dd", 0xa3)

14:08:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400088001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4)

14:08:45 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000010c0)='./file0\x00', 0x44)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001400), 0x7, 0x90502)
io_submit(0x0, 0x4, &(0x7f0000001480)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f0000000080)="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", 0x1000, 0x40, 0x0, 0x1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x6, 0xd9b, r2, &(0x7f0000001100)="d32d120c2982e170a12400a14b2c33686a236d7d15ae2a01d6e393d4c43a8404e8e633d5cbab2d87cb53a584002ccc96d0eb0785c24a275dd009113aed1ea1bd79a6108899ccf02875437b723559ac74ebb795a8d2cc4c096db0ea12e12f0446dfd622970ddd23f60eacbc0244d96d542978a1cd5b5e72559b812177252da7283fd95b58e49cadfbb2af58a657c66ba3aacc43718924ca449aab5c1fa96b98170c1767507a35992931a3b55ced1af74b59d43fd10cb83b78957dbfc8e12286e83871e4d212bab3cd", 0xc8, 0x0, 0x0, 0x3, r3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x40, r1, &(0x7f0000001240)="378b8dc26fd8b182485bd41fb8086ae70fb16cc41820b36d9fd311146c9b34ac522a05c95eb8532f93e8cbf252e2ee8b3d6d6b4f3daefe8d7a78c70f8b45ed3e3d7762ec0dbbc8492ac03236eba5e384276bf5ff480f6c92007b7d9da76274e7c304b1e58a8c61b49f67af1c58", 0x6d, 0x5, 0x0, 0x0, r4}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0xfbff, r0, &(0x7f0000001300)="812eb5e216207163b7c79201add71b364e1a254f35849914ede0ad1ec9f851c21c42cf750a9d20cfffe4f8130ab4a89fadd49a7a53e8b80707d6b4b74e2d7b66b2bc88b27ec28c46425d1fb09236934255460ea7d150fdb9a9637f4502539c8b121f76c21a726ae5489671ae3ff26ed3ecb982f367d3e97d1b0efd7db252dd4f2372da6eecd4137775667bd9d62a7b49913f0dd220cef7d114005be7482dc745ac27af60a971e70c5e71eb5bfe7bf16ce535e2f427c74e784fddff2e710cfd22eb52c6bde21f1e0cf83e2e41d2babd5fc3c0d88f21d4416b01f8092b679aa830db58b501f9f6ab6747af8d38e88811352af871", 0xf3, 0xc1, 0x0, 0x2, r5}])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f0000296000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0xf3d7000)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  749.628698][ T9373] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  749.659591][ T9373] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  749.667800][ T9382] loop4: detected capacity change from 0 to 6
[  749.708495][ T9382] FAT-fs (loop4): Directory bread(block 3) failed
14:08:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x40000001}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000a8001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:45 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f00005e1000/0x3000)=nil, 0x3000, 0xa, 0x40010, r2, 0x3afdd000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$addseals(r3, 0x409, 0x0)

14:08:45 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = syz_open_dev$audion(&(0x7f0000000080), 0xfffffffffffffff8, 0x682300)
write$qrtrtun(r1, &(0x7f00000000c0)="ebbde65ff7706d87e96520c6bb", 0xd)

[  749.914346][ T9398] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  749.939543][ T9401] loop4: detected capacity change from 0 to 6
[  749.956339][ T9398] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  749.983531][ T9401] FAT-fs (loop4): bogus logical sector size 2560
14:08:45 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb8c41406e30a7871, 0x8010, r1, 0x2000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  750.019952][ T9401] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x41000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:46 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
write$qrtrtun(r0, &(0x7f0000000080)="5fa74a6bb85fa446ba84fe340e05c7ca1c4ef8881029b7bd908b13666df4547f488046c8e786fb0774f7c9a2da79d63a147c", 0x32)

[  750.108997][ T9401] loop4: detected capacity change from 0 to 6
[  750.128204][ T9401] FAT-fs (loop4): bogus logical sector size 2560
[  750.196136][ T9401] FAT-fs (loop4): Can't find a valid FAT filesystem
[  750.214494][ T9422] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:46 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80000)
preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000100)=""/193, 0xc1}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/219, 0xdb}], 0x4, 0xd5, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000f8001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  750.264431][ T9422] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x5c000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  750.436583][ T9441] loop4: detected capacity change from 0 to 6
[  750.489372][ T9441] FAT-fs (loop4): bogus logical sector size 3840
[  750.516309][ T9441] FAT-fs (loop4): Can't find a valid FAT filesystem
[  750.546225][ T9447] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  750.566204][ T9447] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  750.601584][ T9441] loop4: detected capacity change from 0 to 6
[  750.619205][ T9441] FAT-fs (loop4): bogus logical sector size 3840
14:08:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r5], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r3, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x1b}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x80}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
r6 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f00000001c0)=0xe36, 0x4)
shutdown(r4, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  750.643157][ T9441] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x80000006}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:46 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
io_setup(0x9c, &(0x7f0000000080)=<r1=>0x0)
r2 = syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xffff, 0x5, &(0x7f0000001300)=[{&(0x7f0000000140)="bb25f3107b", 0x5}, {&(0x7f0000000180)="92f54e529abc3711a40248c97725e34d563dc00e91c6fe08ea9e7f9ea280c3cf879c8be8d4dd30404e0488e0c6889e0e5a6c9e11c1febf0c1856733bdc89c5aaf6452c8dbd2cde93656c3191bf5943a5c193f3f1083d0155d80071d0d9d45c1b83c7269c4dd93b04", 0x68, 0x8}, {&(0x7f0000000200)="9593994dda617c2298d25e82ed8c395214e6b0e1041fb83f30b476234d8d093fd7b7523e07a147abd2c37e0f5ec72b993e0383093a5e6cb35c36a2ab02566e407d6179963e670c6c547aecf6", 0x4c, 0xffffffffffffff80}, {&(0x7f0000000280)="686de9055267a3fb3f91915543b73d81fb30a5664b89c5edfbe08e8b01b245742ecae06ef5dcb935916fdf640943a811177ab54d8892baf17bda8f743d4d76c84a28c6f1eeeed48de855488be823cfce1061123589d9409f3f17f7c85250808ea1a2032d766a398a2bed7cb801bfe85895222d8357f555ac873898da376e", 0x7e, 0xce14}, {&(0x7f0000000300)="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", 0x1000, 0x7}], 0x29098, &(0x7f00000022c0)=ANY=[@ANYBLOB="616e63686f723d30303030303030303030303030303030303030302c66696c657365742130303030303030303030303030303030303030342c726f00746469723d3030303030c4a6bddae83030303030303030303030303030302c756d61736b3d3030303030303030303030303030303030303030303037da726f6f746469723d30303030303030303030303030303033323736382c6769643d69676e6f72652c6c6f6e6761642c66756e633d464a4c455f434845434b2c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',fsmagic=0x000000000000000\a\x00\x00\x00\x00\x00\x00\x00sfloor=/dev/qrtr-tun\x00,appraise,dont_measure,obj_user=\\I,uid>', @ANYRESDEC=0xee00, @ANYBLOB=',audit,\x00'])
r3 = signalfd(r0, &(0x7f0000001540)={[0x800]}, 0x8)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
poll(&(0x7f0000002000)=[{r6, 0xa122}], 0x1, 0x8001)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x5, 0xff, 0xffffffffffffffff, &(0x7f0000001380)="d28907932bbcf2c6bc3a7292e370a7992a361ff4d62916f817544b9affcf85ed6bbcaecd3a5326f4b24dc24bb9a8cbe100d67bb3716fddb4da4c5bf7f0b07d0aeb880f512649965669f43b6fde5f6f5d4617aae6e444bd8251162818c3e1f43875f176e376ea1b9aadcce2157cff56d9027488cd92914875be277fa1304420cc2dbf39f229c56a85ff7d9646ac0ac1afaa80042341ccce0e7231349ddaa5d7de3950ed611e1b2cbe436b0884931de5203856e0f725fc2f43ccc2ec259b5c9e2f80d5b5c97cdc32147d51d063b8023fd126e066900180eca0afe0948c05dcf909", 0xe0, 0x673, 0x0, 0x1, r5}])
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r8 = syz_mount_image$hfs(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x0, 0x7, &(0x7f0000001dc0)=[{&(0x7f00000019c0)="c11ede1fff2df6f129edb27905467e23f473a19cd1c1b252c41e557587767cae6520fbe877a3d8c1d4a4f77bfdfa800677e2cd47a88d48343104499047bf04942d8df77bf16b08ef917758c055", 0x4d, 0x50000000000}, {&(0x7f0000001a40)="9cd5dc6888044a35b91b7878d9ac8c3df14f7160a1f72077c3bf1a7dccb83c200eee838e535f518166095e0b55b6737c23b21e400afa98d3088610f887b5da343f4143e5694e53bc0cfc457a3510b06dd794a1bfd347c3e0b4174c45a3464b7e", 0x60, 0xfffffffffffffd48}, {&(0x7f0000001ac0)="1b695fb221a388689dbb70f3a13e8fcb4680702a454982de176f7a7b2608edec859bf31e5f3ece6c878575e10c889c8ee24775f2983ab58e11db8c257f98eba573efdcbe5ad4cd11ca1f1f523e346cbfbe403a37ab2bc0db322a109e98722489179a8ae45fcaed95069a04cbfc6bb9c7ef92f3947cbf07cfcb6c45835c1e42965f05ac6cb6719bf00117a0a6616ea4ca0b538c68f79abeaba94e3ce6d0be267172f797595c45f49f9c75d951474864e2b7f07f", 0xb3, 0x7ff}, {&(0x7f0000001b80)="b81d11bde5ec9632e3e8d9862bf0fad852f91a5ea36a182da8e349b35151bae82422548298ef22fa84747c08ffe7065eeda99357e17d6213a438f421d140fa620e1fb3353206d9ad1be0c57a44a12d9fcbc7d4ba15340de2393e60c55c19bffc973d981b2b7005957e827411adcacb9f8127de306e426ff857553e04667996cab25ad4d2767eb3221deed0ac4616a2fb85953dfbcfe1ac5abda1f301fa24379797cfb0df32619d873c285894d467707408ea5bec8c9721d3bf9e831613c9a3a73d947bc29bcc063826bbbbe2", 0xcc}, {&(0x7f0000001c80)="b3ecc049d47bb47b37d1fe3b1dae2fc3a82a52b95ee8c3ac5d23548265f4b299130ec8580caf0912f411fd50ce", 0x2d, 0x9}, {&(0x7f0000001cc0)="0e05136a97e791b04cbe94f38a2c94247b1719ded0bb37b9dde727a8561f5b83369875", 0x23, 0xfffffffffffffeff}, {&(0x7f0000001d00)="ba8783965950e59104323c1808210c308e09a004f4a954c2c9617225cd3a3102eb42f9bb096454cea4f2ae05d526e010cca78a05eb5ca0cf56b293041d4e91a3e04b39d4c0c55a7afc1e87ab7d6c58657ef3dcd0ecf7fdd7ae3d777ec9a61a75bdca3230a4f71bc323fa7ba0504958642e94cdfd460a91bd6a17d8d6269bf760a38ce3d0be076f044ee2977df6d6e0877fb581118d0b0a9b88aab030d9235e0910be9e73dc4accbd8c4338", 0xab, 0xffff}], 0x1080000, &(0x7f0000001e80)=ANY=[@ANYBLOB='part=0x0000000000009,audit,subj_role=/dev/qrtr-tun\x00,appraise,permit_directio,\x00'])
r9 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r10 = syz_open_dev$sg(&(0x7f0000001f00), 0x7, 0x2002)
io_submit(r1, 0x9, &(0x7f0000002240)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000001500)="98ab8ea880bf38275566abf5ca1452c5ad2d1cac5fef50121d0345b5a89100604ea3ea9b9a129c47732d77f3d2c2bfc2db14e1a3aa4c23061757", 0x3a, 0x7f, 0x0, 0x0, r3}, 0xfffffffffffffffe, &(0x7f0000001700)={0x0, 0x0, 0x0, 0xb3a7ae22aa073293, 0x0, r4, &(0x7f0000001600)="ecf5104ae162129e1dcf5dba13f568845ef108cc07583b3ea805d317b3141c12c3389ba7c6dd05f7b33165123067840323d65c53a8ccfa47acbd46880cbc28dad7f92648a610c164f007b6bd2d8f9a6ffd8ce0da5b51c1ad31a47f8f8d1b6472fd5abc776da407b452744bf202c682dc193cdd0a8165df521973b8691e4bd809f15f49d429eca5ef82f7a9bcce3607fb11e462fb59ee78674f2633cc9ceb42cbe709cf2967fe7da1991a15c6fb7254d201b627c4be58f1ef776cd1029702eeafc06073bbf812a5d568343203bdc4ed9830e5907d71718f6ea1245b20456414e2072e", 0xe2, 0x3, 0x0, 0x5}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0xa, 0x0, r0, &(0x7f0000001740)="a2974ba28c478448ec4c0ebcc7ec1db9e3570f7d2703c1368049f9d9bb67b0de2668a5e7ec48a68ee6a31c4a17941f1079608b37d480f3e4b413b1f9a34a7a915fb8f57dcaea7655bc2d54fcf8074ea6e75db783a3f84c394a21a496cdf5cc3613de07379c6b759bfaecdf9a3303615afe17c81588130b4f41e528c61d7559d5ad669e7eab41aba3ef59273ffc0d874c974553d525943f6b6276449d650b9959acf51ca62933e68f497400dcced4b745b370d4f43d3dbf837fed159b026a96e12798479688caa629bc1952d48d372a99e6739630ee6d3f93cd00ff24d51cd81ef655729a780a215dba85a6", 0xeb, 0x5, 0x0, 0x2}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000001880)="2613ea3149d7aa872884e4a74b7e044d57e92d3ab1edbba2912f7ad0fc65e3c6898913141c7620e2cbf79531a92096ffa60aee2bdda4fed5c4da85fe6cbe408b4605c50fa6e12505bd56bbac61565ce4dc32", 0x52, 0x7fff, 0x0, 0x0, r7}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x3, 0x6, r8, &(0x7f0000001f00), 0x0, 0x4, 0x0, 0x3}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x3, 0x1, r9, &(0x7f0000001f80)="a1aa38396575f3444da6ddd29e8f0f8da7b0fbc2bc495f98c7afd7e1b5271ec504b2e5185bb9ab222c48f872aae5262b21caa19254e45e7f", 0x38, 0x4, 0x0, 0x2}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x5, 0x9, r10, &(0x7f0000002040)="7085b6a9995e70e826bc3f08d76c6ba62a7bca71e730444227aa5b531cd63bc7e42403fcc49f2cede45c0df45c81f73ea98b9cd18bef16529fed2f395080cc0ca790b55e92be11de3810cfa73f671d952ddea3d5c9f406604e8bc0b563ab08cc19f5c9a1700911ad0f", 0x69, 0x100}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x5, 0x1f, r0, &(0x7f0000002100)="e9e8a4566a67318a25697887e3c0d47d289682eed0b90975e7bf3de4c35b2941a880b85eb3dfd109d8b044d8b0ab6af3ef25ed08815db622bc851a6a538b3b665bc459a300586461f5889599a9eebb4cd7ce076c02ed0f62476c26c9bfe2f11d02fc5f2900a5283661f08c2197b13e0d3a904db11777eb9c3183bbc2791beffc32c998f4a0b1f2dfd79121013a2f80e05428843982cce06b674e111a0568725c02a71962f00e19f64c9c62b3584da2cd285b414e4d3d9811166508b6c5f7799e3a2c098526973c", 0xc7, 0x10000, 0x0, 0x3}])

14:08:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400188001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  750.786199][ T9460] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  750.824500][ T9460] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x80000007}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  750.934426][ T9471] loop5: detected capacity change from 0 to 16383
[  750.940365][ T9472] loop4: detected capacity change from 0 to 6
[  750.986077][ T9472] FAT-fs (loop4): bogus logical sector size 6144
[  751.012262][ T9472] FAT-fs (loop4): Can't find a valid FAT filesystem
[  751.024757][ T9471] loop5: detected capacity change from 0 to 253952
[  751.081850][ T9478] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  751.089632][ T9472] loop4: detected capacity change from 0 to 6
[  751.124429][ T9472] FAT-fs (loop4): bogus logical sector size 6144
[  751.127528][ T9471] loop5: detected capacity change from 0 to 16383
[  751.139590][ T9478] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  751.147769][ T9472] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400648001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x80000008}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:47 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
write$qrtrtun(r0, &(0x7f0000000080)="7267d5d6bd8a6b60d6e083e5fd2dfaf093d2f53fd136ae0044aba64b724d5c1a45ffddf0c02588df43129d1f97c6c1be6cc0e405a6420b4b32543c90ab23c91373b4f9806b6ce105db475b56383ed700"/95, 0x5f)

[  751.368406][ T9498] loop4: detected capacity change from 0 to 6
[  751.413892][ T9498] FAT-fs (loop4): bogus logical sector size 25600
[  751.429681][ T9498] FAT-fs (loop4): Can't find a valid FAT filesystem
[  751.430475][ T9499] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  751.484437][ T9499] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  751.510414][ T9498] loop4: detected capacity change from 0 to 6
[  751.531823][ T9498] FAT-fs (loop4): bogus logical sector size 25600
[  751.572574][ T9498] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000000a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400025601000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  751.779747][ T9518] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  751.810040][ T9522] loop4: detected capacity change from 0 to 6
14:08:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2a200, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c00000041a0d99c33a17422947426eae86d1d9c33d1d7861ef7619213de82ca386b3faaf827ed32ddd388ab0645b776014ae0569aac45ae7009d9e36412c268f3c4e9214dc2f25f5a0bb1108dd4acd055c337df8c98cc66cdabe272af2f774ff20e0ccd1ea8ac4560adbe959b73532384e2ee1c274f5de5b0bf251a6650ceb4dac204fedaf8372101c1e107a2252bfb9396ad44128aadd1e094d0629bdeebd31100956c1830594b97bec3a368341b7b2bdad35ebf4aac22735a1e403c05c1cf", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff000004005f000a000600505050054d5000000a000600505050505050000004005f000600360003000000b7e40025f3645ef7b27c83863b209fc84c433e0735173fe1c63a1d3b117bb04fb4518b866abb680d43db6168d8df338b729506a24a28361138206071e14005cfb7411ca87cef6c631438ca53ebaa25f11567c8cf0da0b65a114ce99d250000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
fallocate(r1, 0x2, 0x1, 0x6)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
r5 = openat(r4, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x8a)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  751.893620][ T9522] FAT-fs (loop4): bogus sectors per cluster 86
[  751.930533][ T9522] FAT-fs (loop4): Can't find a valid FAT filesystem
[  751.978648][ T9522] loop4: detected capacity change from 0 to 6
[  752.014075][ T9522] FAT-fs (loop4): bogus sectors per cluster 86
14:08:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x80000019}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  752.041630][ T9522] FAT-fs (loop4): Can't find a valid FAT filesystem
14:08:48 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = signalfd4(r0, &(0x7f0000000080)={[0x100000001]}, 0x8, 0x80000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f00000000c0)="c8a942969ad812407e5b65757c937bdb898a4256d0abadebd085f93f4e2f", 0x1e)
r3 = dup2(r0, r1)
io_setup(0x3, &(0x7f0000000100)=<r4=>0x0)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r6 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r9 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
io_submit(r4, 0x7, &(0x7f0000000740)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x3, r5, &(0x7f0000000140)="0c6a9f4b16a54eaccea3efe963308b2d5db4a0712f4e5eae3d9a3f4d55693834b45d7a532255efd89c406bbc1e69c303bb3e2a1666d08b27", 0x38, 0x2, 0x0, 0x0, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f00000001c0)="bbf647b07f4266dbc82c7a4907ef8bc6325beafba77e5305c6eb1dcdd5ec9caf2975ced6b063272b5ef7fd0362d61705762277370fd23bb065add6568c4f944394def46fe2fc3aa7451b88412e3c35ae3eee8b75c5da3df65178da2c7439dba58a1faf369dbc9bbbe2d0f35225338231ee85e9a8f40877bb5fe59e28877a3e8aaa346403d8c83df5ee1ed6c6671ab16d49451a31efbf33294b9d50797d100d7ded32a2b6bf80d965b3490c65d2f37c2a6d20cbb4da169f0219a44757240c59cd254755994f176f8de4a2d25dc10c6b904dd9f060fef41e42d6", 0xd9, 0xffffffff, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x6, r6, &(0x7f0000000300)="c38c13e7db15c1b637a7c73872a5794d8dd988fcb75a7e45b3a898d9349ba5b147532e33c79245ca3d092df814f85dbc17ab2e5ae325828e1469d8b74bd3b4d37847c9204a310fae", 0x48, 0x0, 0x0, 0x3, r7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xb, 0x4, r2, &(0x7f00000003c0)="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", 0xfe, 0xac, 0x0, 0x3, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x81, r3, &(0x7f0000000500)="650d246f4c51ee4d51f97f2204c7f5b7cf98b1da691f020710e7431f33ee0b53602747e1c23570ad8f4c92277abdedf011159f1f7d1718de2392d789ac24dc64cc9bd332a34fbd27fc699ed591f133df269cf0eb237ba1f72ab1a79c54327b8ba59354e1d598aae6b7d23a60c3bc6f372ee36c3079339d2d3e4949fc5b4c0b79810126035a868cd0428e9d1640074f533ffa54e3c4d09201640f0b71bf4ea6a04ff8300756695844b1208737567c738ba33e864316602acb79e6d5", 0xbb, 0x5, 0x0, 0x0, r1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0xe9de, r8, &(0x7f0000000600)="97bac7d66a420b033bd5a727440498133bf67ce4bb62abe0e4915d9f969306d55c596a645bc82cf2fe32e74526ce9a53fde8369eff65d535d3", 0x39, 0x5, 0x0, 0x2, r2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xc, 0x8001, r9, &(0x7f0000000680)="339c42a6e4384df05dfed81edb8943be42d951adb379e13a21a4f88a27f92a398e96791096091c5da0ab0fba9843e99f0d7a9002af0f0f1308d32108386539d63f7635", 0x43, 0x7, 0x0, 0x3, r3}])
write$qrtrtun(r0, &(0x7f0000000040)="03213139", 0x4)

14:08:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028002000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  752.156613][ T9538] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  752.273189][ T9552] loop4: detected capacity change from 0 to 6
14:08:48 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x18142)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000001a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  752.330560][ T9552] FAT-fs (loop4): Directory bread(block 6) failed
[  752.379178][ T9552] FAT-fs (loop4): Directory bread(block 7) failed
14:08:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028003000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000001d}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  752.655974][ T9574] loop4: detected capacity change from 0 to 6
[  752.690902][ T9574] FAT-fs (loop4): Directory bread(block 6) failed
[  752.703406][ T9574] FAT-fs (loop4): Directory bread(block 7) failed
[  752.733663][ T9574] FAT-fs (loop4): Directory bread(block 8) failed
14:08:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028004000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000001e}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  753.004540][ T9592] loop4: detected capacity change from 0 to 6
[  753.039294][ T9592] FAT-fs (loop4): Directory bread(block 6) failed
[  753.082773][ T9592] FAT-fs (loop4): Directory bread(block 7) failed
[  753.106800][ T9592] FAT-fs (loop4): Directory bread(block 8) failed
[  753.139577][ T9592] FAT-fs (loop4): Directory bread(block 9) failed
14:08:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x7b, "9d77d675977724caff7720e67c794a8021d15f14449288a79840cad080d1820717b20cb3479308bdddb24c84e2a4f0fe874b4b7a94fbba1ba10e13aa344d2bce629a0835dec91647ffb5085c9a7b2d4c0f38d9c987e52fe43caa8fe73c6faa4a5c5718093e3356c161f360fe69783a9e5932503f866a60d3416240"}, &(0x7f0000000380)=0x83)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff80, 0x76}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xa8d0]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x2, 0x2, 0x9, 0x1]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x49c}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0x20040000)

14:08:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000001f}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028005000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  753.425069][ T9616] loop4: detected capacity change from 0 to 6
[  753.517472][ T9616] FAT-fs (loop4): Directory bread(block 7) failed
14:08:49 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000600)=[0x1, 0x800, 0x4d6, 0x8001], &(0x7f0000000640)=[0x5, 0x3, 0x4, 0xffff, 0x200, 0x101, 0x9, 0x8000], &(0x7f0000000680)=[0x3], &(0x7f00000006c0)=[0x34, 0x6, 0x3, 0x3ff, 0x3, 0x1]})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f00000005c0), 0x0, 0xd9d, 0x0)
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0xfffffffd})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
io_submit(0x0, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f00000001c0)="013bd19b9404fa9735dea9909a7b9ddb9c75a1889227df0e7c88f15d80a5b5823b902695292806b2d2e1c17d729072e472af20c680087f0e486825ac01702964bae30346edc59d", 0x47, 0x1ccd, 0x0, 0x1, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x200, r1, &(0x7f0000000240)="a1b2b085dda88217287d41f9", 0xc, 0x8000, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x64a, r4, &(0x7f00000002c0)="d05d487092bc3e744df7ecbd8d0c792a9f50cb38d2fc684750fe2fad5c76ff53e364732c567b5b275d22409648c9cb9d50d43c8d3ccb6da27d5fbfc1a15828", 0x3f, 0x8001, 0x0, 0x3, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000340)="0e014394", 0x4, 0x4, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="4e8fe49a4de251e9fbcde35cd02b411fcce3e82bd682adc6f6a0d34d3a24264ad1a1591d6b61db16e1fa3241f2c2", 0x2e, 0x800, 0x0, 0x1, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xe3a, r7, &(0x7f0000000440)="483a4d85a4fd6685bbf632b366fb3e24c8811ac8ac630617f8fea60da0551c64d10c2fe8bafb0a598b06e16387faa0d3b65fb8f3a077c5ed3b6ed34ac58163945cfeca579b78679febccb0ab2b555a946cee1c17315a2568b94dabfe2edc3cd78ad05ff62c4b221ebfff1a1a92553654963b33363d0177e3acfdf57a83a4e874e01f6d304bee7c3dc1ec4cf9ca6fe1e5967a9315207383f2e1ffce3adccd35c4fbfc876fb07c0108b4fadbc96be840590d1ca227dd3c3d08eed0dae29dd7b0f88203079e035a825e595cf3ca4c2b255ea83efa65274bf2fced24c2115b005cbd9834a59e4613bed96723377caa705c85ea80e58c3bf6", 0xf6, 0xcf, 0x0, 0x2}])
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000740)={0x80, 0x0, 0x96, 0x80, 0xd460000, 0x9, 0x1, 0x1, {0x9}, {0x2, 0x2}, {0x1, 0x6, 0x8}, {0x7, 0x3ff}, 0x1, 0x1, 0xec, 0xb62, 0x0, 0x28807ba1, 0x8, 0x83, 0x6, 0x9, 0x0, 0x3, 0x0, 0x1, 0x2, 0xc})

[  753.578429][ T9616] FAT-fs (loop4): Directory bread(block 8) failed
14:08:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xc0000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  753.618735][ T9616] FAT-fs (loop4): Directory bread(block 9) failed
[  753.675744][ T9616] FAT-fs (loop4): Directory bread(block 10) failed
14:08:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028006000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:49 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03210039", 0x4)

[  753.796820][ T9632] kvm_mmu_after_set_cpuid: 8 callbacks suppressed
[  753.796834][ T9632] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  753.899261][ T9640] loop4: detected capacity change from 0 to 6
[  753.948280][ T9640] FAT-fs (loop4): Directory bread(block 8) failed
[  753.985523][ T9640] FAT-fs (loop4): Directory bread(block 9) failed
14:08:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xc0000001}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  754.013853][ T9640] FAT-fs (loop4): Directory bread(block 10) failed
[  754.031891][ T9640] FAT-fs (loop4): Directory bread(block 11) failed
14:08:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028007000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:50 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
dup2(r0, r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000100)="3c7d327a47a6ba8e006a85d887505d1a9793fe15954ac4a3614e07b3", 0x1c)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000140)={{r3}, "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"})
io_uring_enter(0xffffffffffffffff, 0x742c, 0x7479, 0xc0806609cae82a6a, &(0x7f0000000080)={[0x4000100]}, 0x8)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r4 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0)
dup2(r0, r4)

14:08:50 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x70)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f00005fa000/0x2000)=nil, 0x2000, 0x1800003, 0x4000030, r2, 0x8241c000)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, <r4=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r4, 0x0, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r5]}, @devid})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, <r6=>0x0, <r7=>0x0})
ftruncate(r0, 0x72e)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000280)={"f434d2c073a0a0aa205d707372b67030", r4, r7, {0x21, 0x1}, {0x8, 0x1}, 0xfffffffffffffffe, [0x3ff, 0x100000001, 0x7, 0x0, 0x5, 0x100, 0x18, 0x8, 0xe4b3, 0x5, 0x1f, 0x4257, 0x1, 0xa72, 0xbd10, 0xf04a5361]})
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x805, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x9, 0x2, 0x7fffffff, 0xff, 0x0, 0x5, 0x9, 0xc94, 0x3, 0x1, 0x845, 0x9, 0x57, 0x100000}, 0x8, [0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001840)={r6, 0x0, "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", "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"})
write$qrtrtun(r0, &(0x7f0000000380)="010009d8f0944963506848b26c4520cf76f934", 0x1)

[  754.177173][ T9647] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  754.271377][ T9647] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  754.290000][ T9647] kvm_mmu_after_set_cpuid: 8 callbacks suppressed
[  754.290015][ T9647] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:50 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000016f97af91cf46678ef3f6dc2f89a81c734d8854719a36f6fc7d28a6c1542b1a1e23840e9dc37a7aa75edcbc35f92541fd5ae62259f27ee9494f9edd7932f34dac121ed39d66e0e008a393d32a6170f51e0d05df17a2c945684575329e2f942d4e46e4e983685f1b4204b6f746e7bd54cf3", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff000004005f000a00060050505050505000000a000600505050505050000004005f000600360003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
connect$netlink(r4, &(0x7f00000001c0)=@unspec, 0xc)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:50 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{0x0, 0x9, 0x5, 0x1}, {0xfff9, 0x5, 0x94, 0x3ff}, {0xa2, 0xe, 0x8, 0x28c5}, {0x7, 0x7, 0x80, 0x8}, {0x1, 0x20, 0x81, 0x1}, {0xf675, 0xff, 0x3}, {0x9, 0x0, 0x4, 0x2}, {0x5, 0x7f, 0x1, 0x1}, {0x1, 0x3, 0x6, 0x2}, {0x20, 0x4, 0xdb, 0x6}]}, 0x10)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  754.363991][ T9667] loop4: detected capacity change from 0 to 6
14:08:50 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x4, 0x18, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x12, r1, 0x0)
fcntl$setpipe(r0, 0x407, 0x78)
mmap(&(0x7f000076a000/0x1000)=nil, 0x1000, 0x8, 0x10, r1, 0xdc1000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  754.427850][ T9667] FAT-fs (loop4): Directory bread(block 9) failed
[  754.462743][ T9667] FAT-fs (loop4): Directory bread(block 10) failed
14:08:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xebffffff}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  754.509627][ T9667] FAT-fs (loop4): Directory bread(block 11) failed
[  754.564523][ T9667] FAT-fs (loop4): Directory bread(block 12) failed
14:08:50 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000080)=""/131, 0x83}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/240, 0xf0}, {&(0x7f0000001240)=""/209, 0xd1}], 0x4, 0xd9f, 0x3)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:50 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x4900)

14:08:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028008000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  754.683861][ T9681] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  754.724959][ T9681] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:50 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00002fd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x353a4000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x46)

[  754.832730][ T9696] loop4: detected capacity change from 0 to 6
14:08:50 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {0x7}})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/206, 0xce, 0x3, 0x8})

[  754.875834][ T9696] FAT-fs (loop4): Directory bread(block 10) failed
[  754.902610][ T9696] FAT-fs (loop4): Directory bread(block 11) failed
14:08:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xfdfdffff}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  754.928393][ T9696] FAT-fs (loop4): Directory bread(block 12) failed
[  754.951044][ T9696] FAT-fs (loop4): Directory bread(block 13) failed
14:08:50 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  755.025167][ T9705] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:08:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028009000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  755.067545][ T9705] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  755.209085][ T9723] loop4: detected capacity change from 0 to 6
[  755.240549][ T9723] FAT-fs (loop4): Directory bread(block 11) failed
[  755.247108][ T9723] FAT-fs (loop4): Directory bread(block 12) failed
[  755.270508][ T9723] FAT-fs (loop4): Directory bread(block 13) failed
[  755.277065][ T9723] FAT-fs (loop4): Directory bread(block 14) failed
14:08:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002800a000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:51 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)="845eb257d18a441494156c8a76d780b079968ba49335fa879f30120745a9fec3d8d243", 0x23)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:51 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f0000001080)="8a87ac6b47fe4fb193bae06b50fb275a", 0x10)
write$qrtrtun(r1, &(0x7f0000000080)="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", 0x1000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xfeffffff}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000877e8142266e4a3fbe91c96da3ec451945090f767ca76a48789b021ea2f48b94a25918e8ab5a9fbd95590810fa0602f94c004f114f8e3691e2cfc6c20c717c5aa0892460c33381c203770d34ceee", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff00000a000600fc2ee6312f3600000a00060050505050505000000a000600505050505050000004005f000600360003000000"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x100}]}, 0x40}}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}]}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="050018011e000000"], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x24041)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  755.480424][ T9738] loop4: detected capacity change from 0 to 6
[  755.521009][ T9737] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  755.529432][ T9738] FAT-fs (loop4): Directory bread(block 12) failed
[  755.558639][ T9737] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:51 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000080), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  755.559045][ T9738] FAT-fs (loop4): Directory bread(block 13) failed
14:08:51 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/143, 0x8f}], 0x1, 0xd9f, 0x3)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  755.685386][ T9738] FAT-fs (loop4): Directory bread(block 14) failed
14:08:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xff000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  755.735938][ T9738] FAT-fs (loop4): Directory bread(block 15) failed
14:08:51 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000007000000000000003300000095000000000000006aa4feff00000000757802000800000018250000", @ANYRES32, @ANYBLOB="0000000000080000950000000000000013a2b2351f0d79cbd1e4f923fc269ac0f4c1eb03c4ff4ab743f50c7df7526f83966cf533fdc1c90ac909a1aee38c2a1082"], &(0x7f00000000c0)='GPL\x00', 0xf1a, 0x56, &(0x7f0000000100)=""/86, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xe, 0x45, 0x1}, 0x10, 0x16bcc}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r1, 0x0, 0x16, 0xd, &(0x7f0000000080)="ef0cfde51b34ab43982dd37655bf900a2f5bb68c81dc", &(0x7f0000000340)=""/13, 0xfffffff8, 0x0, 0x1000, 0x59, &(0x7f0000000440)="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", &(0x7f0000001440)="a158ec209c2fa7929d6963c3d17befba38ac79dcf4a4d88970495d990c8dcf52ebdc29c0c8b568cb569fc8bac30e6c5292350c4bcbafdcea9dc44b3640f9c8eac52d4587202bb71cfd00e039b2fe582b069ec0ce239dd473be", 0x1, 0x800}, 0x48)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000280)={0x500, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x8, 0x0, 0x8000}, {0x80000}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
dup3(r1, r2, 0x80000)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002800b000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:51 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00002c8000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x897cf000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1000000000000259, 0x6, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000003240))
recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x8}, 0x80000001}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/13, 0xd}, {&(0x7f0000001600)=""/152, 0x98}], 0x2}}, {{&(0x7f0000001700)=@caif=@dbg, 0x80, &(0x7f0000001880)=[{&(0x7f0000001780)=""/237, 0xed}], 0x1, &(0x7f00000018c0)=""/35, 0x23}, 0x6}, {{&(0x7f0000001900)=@alg, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/186, 0xba}, {&(0x7f0000002a40)=""/17, 0x11}, {&(0x7f0000002a80)=""/182, 0xb6}, {&(0x7f0000002b40)=""/235, 0xeb}, {&(0x7f0000002c40)=""/160, 0xa0}, {&(0x7f0000002d00)=""/125, 0x7d}, {&(0x7f0000002d80)=""/159, 0x9f}, {&(0x7f0000002e40)=""/240, 0xf0}, {&(0x7f0000002f40)=""/122, 0x7a}], 0xa, &(0x7f0000003080)=""/175, 0xaf}, 0x80000001}], 0x4, 0x1001, 0x0)

[  755.930633][ T9762] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  755.953794][ T9762] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:51 executing program 0:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x62000, 0x100)
bind$x25(r0, &(0x7f00000001c0), 0x12)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000002, 0x2010, r3, 0x2147b000)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)
write$qrtrtun(r1, &(0x7f0000000040)="03212139", 0x4)

14:08:51 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x400401)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a001)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xfff, 0x4, 0x8b})

[  756.036070][ T9777] loop4: detected capacity change from 0 to 6
14:08:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xffff8000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  756.107463][ T9777] FAT-fs (loop4): Directory bread(block 13) failed
[  756.146209][ T9777] FAT-fs (loop4): Directory bread(block 14) failed
14:08:52 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000200)=""/42)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x71, 0x19, 0xac, 0x4, "e782a1e2793a825fc19339ed61a5e6982d53380b217ade6840a81451573bb107"})
sendmsg$AUDIT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x800, 0x70bd29, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x7}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24044051)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  756.172122][ T9777] FAT-fs (loop4): Directory bread(block 15) failed
[  756.192177][ T9777] FAT-fs (loop4): Directory bread(block 16) failed
14:08:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002800c000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  756.258290][ T9788] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  756.298403][ T9788] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xfffffdfd}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:52 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="61fc1c08b7a5236482031c1570654255d82c9f72b7", 0x15)

14:08:52 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
pipe2(&(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x4000)
dup2(0xffffffffffffffff, r1)
write$qrtrtun(r1, &(0x7f0000000040)="03212139", 0x4)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup3(r4, r5, 0x0)
io_setup(0x3f, &(0x7f0000000080)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}])
r8 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
io_submit(r7, 0x2, &(0x7f00000014c0)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f00000003c0)="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", 0x1000, 0x754, 0x0, 0x1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x2, 0x7, r8, &(0x7f0000001400)="c14e59554fff6927096f8701f62b7765c2c359a7e762b5e879ae3e9501dda3a63b7f302653128583970b66eed19c65d9fa6b083f4e5047a76d84de69908819f11517c30739034c792bf8", 0x4a, 0x4, 0x0, 0x1}])
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000380)={0x9d0000, 0x10001, 0x2, r3, 0x0, &(0x7f0000000340)={0x980910, 0x7f, '\x00', @value64=0x3}})
syz_io_uring_setup(0x5301, &(0x7f00000000c0)={0x0, 0x6a56, 0x0, 0x1, 0x1a7, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000002c0))
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000180)="77b340527ee8e3771b11bd89324057aab094f3f68b3d2ea78dcba67ece88e1a0e992ffef80382802fe0f438eea1c15808c3d9c8833b3a27c2b3b96fdc215028b00f11705b3b399e6b06ad44aaed00153e6b49df2a5cfb8950742a0be6c99ecf58a1dc9b5325c71200000000000000d9ccdabc9087969e325a75a101f6b31b8eed745449bbb485b0a03bd9120698fd64e4fdf3fddc9f6a10aa95951f1590c84e726f40a5853c816a4187c4000b7a41f283567f504812f643c55249f8717f85e57c7727cbc7b0bbb882ec6ce73e9662611c7eba37eea549bb449c358d652b905e36575e19b56fe4a8ee829ef8da07f2438148392af2eb568f098b1e9bab0c40cae069b703f3e1c798c6455ec17e1751db55ba8d186d4bf806a833311fb0d0db6cdf8c4a275c0209c0348673eeb4243514c2d18a7fbb69d9a", 0x137)

[  756.435350][ T9801] loop4: detected capacity change from 0 to 6
[  756.465458][ T9801] FAT-fs (loop4): Directory bread(block 14) failed
[  756.496768][ T9801] FAT-fs (loop4): Directory bread(block 15) failed
[  756.527623][ T9801] FAT-fs (loop4): Directory bread(block 16) failed
14:08:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xfa}]}, 0x50}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x174}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4050}, 0x48800)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  756.566390][ T9801] FAT-fs (loop4): Directory bread(block 17) failed
[  756.585032][ T9809] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  756.619853][ T9809] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002800d000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:52 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
preadv(r1, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/240, 0xf0}, {&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x9, 0x74f3, 0x80000001)
memfd_create(&(0x7f0000001d00)='\xdb^:\x00', 0x4)
read$qrtrtun(r1, &(0x7f0000001600)=""/237, 0xed)
preadv(0xffffffffffffffff, &(0x7f0000001c00)=[{&(0x7f0000001700)=""/9, 0x9}, {&(0x7f0000001740)=""/223, 0xdf}, {&(0x7f0000001840)=""/57, 0x39}, {&(0x7f0000001880)=""/165, 0xa5}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/199, 0xc7}, {&(0x7f0000001a80)=""/220, 0xdc}, {&(0x7f0000001b80)=""/94, 0x5e}], 0x8, 0x4f9b, 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000015c0))
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000001c80)={0x0, 0x7ff})
open_tree(0xffffffffffffffff, &(0x7f0000001cc0)='./file0\x00', 0x9800)

14:08:52 executing program 0:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xffffffeb}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  756.818642][ T9830] loop4: detected capacity change from 0 to 6
[  756.856234][ T9830] FAT-fs (loop4): Directory bread(block 15) failed
14:08:52 executing program 0 (fault-call:3 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:08:52 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x480400)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
dup2(r0, r0)

[  756.874225][ T9830] FAT-fs (loop4): Directory bread(block 16) failed
[  756.907901][ T9830] FAT-fs (loop4): Directory bread(block 17) failed
[  756.917132][ T9834] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  756.923387][ T9830] FAT-fs (loop4): Directory bread(block 18) failed
[  756.946767][ T9834] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  756.973368][ T9840] FAULT_INJECTION: forcing a failure.
[  756.973368][ T9840] name failslab, interval 1, probability 0, space 0, times 0
[  757.038788][ T9840] CPU: 1 PID: 9840 Comm: syz-executor.0 Not tainted 5.14.0-rc3-syzkaller #0
[  757.047484][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  757.057541][ T9840] Call Trace:
[  757.060825][ T9840]  dump_stack_lvl+0x1d3/0x29f
[  757.065516][ T9840]  ? show_regs_print_info+0x12/0x12
[  757.070727][ T9840]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  757.076454][ T9840]  ? fs_reclaim_acquire+0x7d/0xf0
[  757.081487][ T9840]  ? __might_sleep+0x100/0x100
[  757.086269][ T9840]  should_fail+0x384/0x4b0
[  757.090699][ T9840]  ? tomoyo_realpath_from_path+0xd8/0x610
[  757.096424][ T9840]  should_failslab+0x5/0x20
[  757.100946][ T9840]  __kmalloc+0x89/0x390
[  757.105118][ T9840]  ? tomoyo_realpath_from_path+0xcb/0x610
[  757.110951][ T9840]  ? trace_kfree+0x2e/0xd0
[  757.115383][ T9840]  ? kfree+0x2d/0x2d0
[  757.119380][ T9840]  tomoyo_realpath_from_path+0xd8/0x610
[  757.124951][ T9840]  ? ksys_write+0x219/0x2a0
[  757.129499][ T9840]  tomoyo_path_number_perm+0x1fb/0x790
[  757.134977][ T9840]  ? rcu_lock_release+0x9/0x20
[  757.139759][ T9840]  ? rcu_read_lock_sched_held+0x87/0x110
[  757.145402][ T9840]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  757.150918][ T9840]  ? __fget_files+0x35a/0x390
[  757.155608][ T9840]  security_file_ioctl+0x55/0xb0
[  757.160589][ T9840]  __se_sys_ioctl+0x48/0x170
[  757.165192][ T9840]  do_syscall_64+0x3d/0xb0
[  757.169625][ T9840]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  757.175531][ T9840] RIP: 0033:0x4665e9
[  757.179434][ T9840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  757.199057][ T9840] RSP: 002b:00007efd7c4ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  757.207475][ T9840] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  757.215459][ T9840] RDX: 0000000000541000 RSI: 000000008004ae98 RDI: 0000000000000005
[  757.223435][ T9840] RBP: 00007efd7c4ad1d0 R08: 0000000000000000 R09: 0000000000000000
[  757.231410][ T9840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
14:08:53 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
write$qrtrtun(r0, &(0x7f0000000080)="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", 0x1000)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000010c0), 0x2, 0x0)
dup2(r1, r0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001080), 0x428000)

14:08:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xfffffffe}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002800f000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  757.239397][ T9840] R13: 00007fff7cba8a4f R14: 00007efd7c4ad300 R15: 0000000000022000
14:08:53 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f00000001c0)="318b244934693259591bff6c78f5182e55f56b7a8da1a1de5180392a0ec66ee403f0bc502da40ec6d17260b04e60176cb878cb4b3f638321ea50886c632564825237d904c5b86f0330e82a79b4b2a4590954127ee585052154248467e595703f97da02a6ef0e053362a2f4d01246933c7bc0eea6d1ea9aa9c1dd03fa8ea3554f57cc14d92d073890bf1642de028188859f3e65c4b29f1fd0f9f56ca79dc0e89fa6fceb9ae3718ff45d57b7ad118375cd45c29830531a78ef199a5bbd1ea6a8f382750846af229966c6b3739604b43c4e6ddfb1d81ea74b55b39f54ed98673d62a56e766bbc6afaa2e6b591a3a042a3794cba1f0d16ce5ab3c4e11fea32379480fdcbc937a1028f0de955a34f825340ea359e040746a77a468b11aa1d01498574e56f65e9ab196d9038eff3fc315cb63e4200fd80b78b03f84f2c671f527f8a1d05371d429a23139b10b0b1c503280d4a6a824064617473a73b1c7067e28d7cd6a4d2f831271a70460e341a3f43ec99bfef0ce0a4372da8d9b8e01f091c62e26a1c8e2188252cf1a3b9ebe0146d1e9b4edf7c66f75d0f3e3ef0206a96a111d1dd462fe18f9eaa181d3a8983b7fbddf3b09ef6e9e1bbb789b95a61eb5838d9d7f0ba709056f2c2daf5b19da2157f2e2cfc7af7a42affd54d75f5e1ccbe751fdd98dc7bd5fb135562f003d93b887b2fc354a358811a5a4e33243ddbceffd7b0dd538d9cf45204b8a639f12070d28ccd816c3391a30ddc344a195cc62d197062cff424e132dfeffe969d8620b103a478edc37b6fc8e0f31929b4b5052d949965c1ac541c5d422769eda8377b7c33a19110a8a3efa6969f0ef66fce5ac76053fa063fd68ecc74ce94cdccc33b88e95cfbbcd1cc104d86d3c9f8c1c7475e2805b2d19dafab5c0e4945f3794c19916e6a33cf9be3e8da60eba84edbf34157433ad1a1ed85b8812cafcd136f271a991e49456ada3258adc714a4cc6c42bff1684c6c1d8a8aa09dd8efc1eaeb5b4e32fd9fcb1652b0a81662408c6c9cd2b49831b8d47d84c88ed1d23237650c8b37c0cf40fda47dd7413f879b33255ce57080d94963ce6a518ff2658cea43917cf488e0834c7e231526cd486c7ca7c0d34ddd8f7934c104e23cd85230759b11cdcf5d31cdacb13cd3d6b950873b534a3cda0d496ae1da9232f2da854aedbb106a46a8ced73cde0e66742a7410821cb28a5665ae6b36110d746c2748982f1ce0c572aa4ab493e53bdeda95131c48da59de6d588a32e16fa14131faf89f405931b1ba449084bbf0149dad2c14994c3d43a6b439e3eef450d5d2002a7484fe445f8ca5075b6c481c0b70c51de2a123754f8b98817cacc51c0fad2b89d5e184eadaa15cfe3455e62b0c976b45d406989ba3cc7a584e60823533e1d2303c8e322f2688b2c9054f54235d012e862ee27176562cf6cd61e012dbeaacb9d1dd31b35160e568287cb73d146c613a70ae1c15a39ef2674dc0ba5a3c3994a67cbf0a4772585d76625dbda6303bfb8666d7277dea90f3998ed250ab458db7a8d1cda5e92b5723776389782e367eebb30c35d37e12f8eb3945807fb5906cab5bc62e2db7bb0ed2fb29f27ceda2459f177a037de34978a6f28b1bad8388091d10ba8511b3e560798f71fd0220a5eb110911ed11c9f50e36df4fddf546674530fbef537d87f574be22e8db74fe9df3c47997ca837a6e13ba53055b557287f29a3d3aeb776ff0398a1481de776996e820fab15d9eda46b122008403e62784dab7f4798e19fa11e7bc5de9c2822f1d191cbb331ce5dd0e2268dff603d7f142a916825b36fcf5e09e70c51517a74bec0d435a80e581fd20931fd6d175e8d4c89f0dfe1360700600ffec2465ed8cd0adede1ab08bc4b77e3440df6a71a323b2af8cacc59990f8d8a76c7b469cfcff5281ccff72f6d00cb4511c8a351aded4698880edd189920170f8eed7419c9ccfed8a69278a332abd4778e5bb08aa2273ef185817869aa7918f51648032359c75fc05bdfd66142c165fd213b86d8dcdfddb3d7ddeb8e5bdbcdda5f54dfad261ad454ceb95b6f00d59a397fcb23d15411860c1160ecc12ffa9f5a3385649eb9ef3aae66cd3050573451c8cea6e39fb3c0e60ad71a1af3519ef80bf76c669009bfd73b2287e30813db573db89bf540d7b7d305f0194730b71b293c9ac76f3b624bf3fcb26f3365fc5a71446c36f241c2dcc35b9a38cc30616a6cd8c1ef1d0b275c13e05f0a52d219f90ba9cc7a4573c66fc2048ebf12e796ef7b9d6bf7d6fcf76e56992c2750fb3b0a85e3b66c951549e1abdfd5d6a0d46121522b2b7af02008ea01b3fac27f8c34aec4b501f53b35d32309376d4c0e38ae791e2dd504bd0e4848587aed0be850912864a8e9b0d7d674040ded7803b1a3062bedbc20999f0f510a155b9e8bea2162daedc6c5989a5f2ddbaa40ff297f8a9cb790a90c7bf4164d41b3cbac29dbf03f134318012511804c3d7744cb7788b6610a1ab2415e17e0a1d366d11be12b07051a930741d6bc43854f271c6c1d7737869bd0ccfbda83d0b5d555c7ca69b012b331893cf6eecccb90d5d3e696efa91fdc6b4aaacf80b7d0b82b72ab7b94ea2acf3bb01dfac27421f14ee0ee985484e1ec130af2652a6308f5f58ddb214af32fcd74fd9d054beed9d3e8b1ffafae8387f831ea24547c82adbc95ceb922305686565f42e54a024c6608ddb3a0c0f8d6dffc3bafc3a2265b28c1a4d0f7191854cb84255c623bcbacd84183735045b965815f1fb2da709d19a7a5692d29bc6f331fa4d270ff85c4eb4cfd97a39d697ca3834179e97bb339b2632b2cb450d278cdb136712e1f04bc05973d8c32394d249385695709596005496a48abfdd224a1d8ca77c6073beec837f3bf7f863daf076f87e2d2f5f35c2084e25e5aa4f5d5c78d770c21d450971fabd7e13be26728b62be00c538cbdc25b8c86bacb8339b3c64001532e331951b21f6b909f354ac695883bc8c746a78a60527de0c88a03767c5c98bc4351c28e5b6a3ac0c9fb7df5687aaa4af6b1976475865025c6e4636ee21380e16976575a46be448980f168f2ef60b8f1c33703d5680d74c21cbd13ab13cbefd807e57b3ee89a219883a95fb72bffebbaffc2c85a12c7a347971c9f7896b5a18ce503684706b36388514902005d449440f6fd9c7975e4f437fe4b9d60e808d831062fea71ef6e85873563219de1b07b2b549f0323c2cb4ddf95061f44357524adcd00f20937dbbe6e559875d6d545def6648327d58dd888fed5da25c99929d261d098ba8cf67fb1be089ba31f55512a2e9dcae0cb8c35f91995078e9003a66af44f6b8de2d3dbd9c432104eb03c7ca10b6de075776993c13ff671512bf19d8e565bce887e46a4d8cd08e5f621edb3e3338d0f4c9d122b1f101590c5e7a57a2edcd433a88531401726f8ac7b531801f0eb2b1445d81217766ffc2b6cfddc1930f4a1e031c54989ffc3a30a55672ff4b803e3fa4ba6a1f09017255fcaa9aa5acc5fb79cc71348ec9b8bf896cb4efc1dadd2770957e4c9b370f8570a6c3356e39bf382dc489ec5dcedd1ea9e0b9636c80514e0c9d211cc17302a582c7c3af1ac34a088b7dacfcf9a0cd153e64bd9aab7d4445fa8719022de81289b7f55e509f4e9b1676408ebc1dad520a27244a16d1d6b4c4b4b4cf43e5aabdd73596d1bed07879c5cbccf9dd12372854bce54b3238910c2fda8cc922c3e2384c20534f08807f46712a9cf3daf5d5241c53420599b7980614b4f2aa80229023271febbbdae64bf0408dda76c48ea0d5bf37cb87b138686816892f60312b8fbe2a93260429319551e1f4566f8f77da816a547f1028617e2f73b496b9218c66ac74da680d1c4c8b0fb54a689a611dcb05912a354322354a5c3104f013d9a991161705c05ae627cfe1749ce649ea30d3df0e9c0fc5c930ed45e2b86b1b0ab3a9e098efe4a1e6226a10df95c07baabedb0b4d3b7e3a839dc6633635011ed9673e2a3edf35fe28f4b43ba47c8ef78438567d2729e7fb2299d35e0ae03dd7ed0b512d36b3fd32daa464f717b36bc3c63c4e2e04194f64ecc6832dc3b60e092691e03088c6b138a284836dec3f0b2046eeaad791d38db093567fd59eb3a7f5c15375b271cebfeba836ddb50f905db2128b3e70bcd151d100fd9935ccfe9a933a14203a262810cbb227e7bd6edf674cadfeb7d2df3f8e29dbf3525c2ff95bdcf8bb9bc9f87f772e39f146d3ec6c3c8b136f09473ad43c76e85a7fb3d0ba1449bd231ecc6e9d78afaad51307af7b8d4327db1bf090eecb01eb052682a2c8fa676b61a7c3a1c56bdd876c403763f5c4cfa3aaafd4214e4657a121a2985074403a9aa3b04d5139d608e03063b1dd02b6459d932fedb3ab9415bff3c1ebbc49fadb82cb37ebfdcded1d595c491b8bcf7a1a35abd86fd7276d609f5b05a2f3b4e47895494ee3a0dbecee7fa0109bb93162fb02c75ef56eed844bd42fd8c96863480d5e3ef1349f8721de4fe1f1864bdf3264037eb57fd9a608c6bd7eeba279c46fa197cd3915a643b310b179775f0199f867a5614c84f71b7352f453240797fb989a10803703f3227e86ba4b39d386bced26c2ddefa82d4a8500e5d2075b88df16ccada38220671680176d344ac031bb20d8c86df8ce042a2539d8134d3990cedbce7eb7894683c6f2e44380571876f92879ef35e3022810e5843ef58bb3ec0aaef64c1a5724ae995b62942c3167e2c90ea14855b95167868d084e2a9ca4b6cd168fef3ea946f374068a3d8fd546789283e50c669a4687fd83b65e46a22bc3f6ea84dddf9c714fbbd95392f97bd538c4308f3760448c1f1f16608c461346d0ba403c6230f18dd494dbad40986b8d35e75acc45b4ac185e7772547823400c7689a71f7f549bfc33d6d8d37b12660365d59825dde5eb4d3ef5b8afd734a73b150f931ef99591c54ba84415e777b10036931bef78cb57c8d770e311ed3a10c8872eb2be8a48906166dd262d47c39706fbe6813947ec243f01b8e78115066a17cecc5e5afcf8981ef614f5e751cfc0ac19081b79cd368a687601e0ced795dc7701d2d621358b0feb719f4f2f8585d978201885c25555618208db1033bd03d01211f702cbc4572217eee03627dd51323c1044104e6afb2f4a35be75e18f6402881f62f9ef46a43a4c0be3db0b129e7e061198b68e3f8da3bdbf96037a854591cc5988fecb22f7ad95c5f527f6a0fff7e049970fedcf822ea53978ba8ba1028417c730c2ed977d90a9d64b94dba0b13edbdbe093eccb47b46323a147783e70b569b84a5e2d6f1cc98c291be4385fe7d0506c87faa5e6589af0b2dff42845c04129738ea07a1e69fff750095f2303deb06ca7c992b63d4fb87a077fa3e3ac236600cb5b8828f680f1da82b4c9a90a8c656ba1b73403bc497d9f3a6977fa3a85c758a7a1922c09f43a7d9ae498ab0a11695333fef998ff25332d2606a024f18cd1524736e52365d785c89888f27d6807d411dd42cfdb29cd152632041a1e3b2a9ad2fafc029ef5f441b30128a2c961d67c898137ece91539a6525ce1781a00ae526a10c08f02a886b252471af89796c6ad7485683a3720ec49152c52fd66213da4bebd6016ef1c78d922293ff2f80b8658fcaa4b15cf4421b4289769f1e31252ecf2c2b66571cc57b9042efcf4ea61aa45fe3de8c9858db3a8e8ab3f8c707e633eb11aacc46cd6d7d66f958e8d34c0a14d8710ce5ae62eca825e6ec25dc74653eb36e65ed9020ac93bec40e0531ef60226cbd66381660ee1ce20d03b64a0d", 0x1000)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x29b5f000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delvlan={0x4c, 0x71, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x7}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x65a3}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x4040004)

[  757.386767][ T9860] loop4: detected capacity change from 0 to 6
[  757.392945][ T9856] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  757.418386][ T9860] FAT-fs (loop4): Directory bread(block 17) failed
[  757.433969][ T9860] FAT-fs (loop4): Directory bread(block 18) failed
[  757.445064][ T9860] FAT-fs (loop4): Directory bread(block 19) failed
[  757.452502][ T9860] FAT-fs (loop4): Directory bread(block 20) failed
[  757.467613][ T9840] ERROR: Out of memory at tomoyo_realpath_from_path.
14:08:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028011000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  757.506642][ T9870] qrtr: Invalid version 49
[  757.551407][ T9870] qrtr: Invalid version 49
14:08:53 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
preadv(r3, &(0x7f0000000680)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000780)=""/207, 0xcf}, {&(0x7f0000000040)}, {&(0x7f0000000380)=""/28, 0x1c}], 0x7, 0x3ff, 0x8)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000880)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="a7cde28b76fa415009a3cf182bbbc0df79bccb86aac018a2db444c7c2c85feb24b489b8abe24ae8de542fc23e2854deb9971e35fb24bde842b675750cfdc74d8082c3a863c335426fe90225c526f912600b2538bbf9ff0dd31060714a269c457bf436fe4d375cd7df09d568607", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x4000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:53 executing program 0 (fault-call:3 fault-nth:1):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:08:53 executing program 5:
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040), 0x2)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="396a3db1665cfc58", 0x8)

[  757.701405][ T9882] loop4: detected capacity change from 0 to 6
[  757.718295][ T9883] FAULT_INJECTION: forcing a failure.
[  757.718295][ T9883] name failslab, interval 1, probability 0, space 0, times 0
[  757.746133][ T9883] CPU: 1 PID: 9883 Comm: syz-executor.0 Not tainted 5.14.0-rc3-syzkaller #0
[  757.754931][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  757.764991][ T9883] Call Trace:
[  757.768273][ T9883]  dump_stack_lvl+0x1d3/0x29f
[  757.772961][ T9883]  ? show_regs_print_info+0x12/0x12
[  757.775537][ T9884] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  757.778166][ T9883]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  757.778195][ T9883]  ? fs_reclaim_acquire+0x7d/0xf0
[  757.778217][ T9883]  ? __might_sleep+0x100/0x100
[  757.802161][ T9883]  ? dynamic_dname+0x10f/0x170
[  757.806937][ T9883]  should_fail+0x384/0x4b0
[  757.811363][ T9883]  ? tomoyo_encode2+0x25a/0x560
[  757.816216][ T9883]  should_failslab+0x5/0x20
[  757.820721][ T9883]  __kmalloc+0x89/0x390
[  757.824878][ T9883]  ? __kmalloc+0x2f8/0x390
[  757.829305][ T9883]  tomoyo_encode2+0x25a/0x560
[  757.831065][ T9892] qrtr: Invalid version 57
[  757.833982][ T9883]  ? anon_inodefs_init_fs_context+0x60/0x60
[  757.834011][ T9883]  tomoyo_realpath_from_path+0x5c3/0x610
[  757.834042][ T9883]  tomoyo_path_number_perm+0x1fb/0x790
[  757.855644][ T9883]  ? rcu_lock_release+0x9/0x20
[  757.860421][ T9883]  ? rcu_read_lock_sched_held+0x87/0x110
[  757.866066][ T9883]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  757.871578][ T9883]  ? __fget_files+0x35a/0x390
[  757.876276][ T9883]  security_file_ioctl+0x55/0xb0
[  757.881222][ T9883]  __se_sys_ioctl+0x48/0x170
[  757.885823][ T9883]  do_syscall_64+0x3d/0xb0
[  757.890253][ T9883]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  757.896155][ T9883] RIP: 0033:0x4665e9
[  757.900058][ T9883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  757.919757][ T9883] RSP: 002b:00007efd7c4ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  757.928178][ T9883] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  757.936250][ T9883] RDX: 0000000000541000 RSI: 000000008004ae98 RDI: 0000000000000005
[  757.944234][ T9883] RBP: 00007efd7c4ad1d0 R08: 0000000000000000 R09: 0000000000000000
[  757.952646][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  757.960626][ T9883] R13: 00007fff7cba8a4f R14: 00007efd7c4ad300 R15: 0000000000022000
[  757.981271][ T9882] FAT-fs (loop4): Directory bread(block 19) failed
[  757.987827][ T9882] FAT-fs (loop4): Directory bread(block 20) failed
[  757.991408][ T9883] ERROR: Out of memory at tomoyo_realpath_from_path.
[  758.030204][ T9882] FAT-fs (loop4): Directory bread(block 21) failed
[  758.036751][ T9882] FAT-fs (loop4): Directory bread(block 22) failed
14:08:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028014000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:54 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={<r1=>0x0, 0x1}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r1, 0x7f, "5627adab76369b4f2ddae71ea3bc30ed09f21725c1e0e686fa42a6c637e6dc00c7275148190590e8b8944a4ff6015789a22678a200376af873cb3fc8d3b597eddc3362d70765388481a8a93ff058d0fd8501a2e4744b904b7d3bbe263cf64589a039e0e78852fb7178a3ba459cf3c5f9d9858919fbb7bef063480f072d86de"}, &(0x7f00000001c0)=0x87)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r2, &(0x7f0000000040)="03212139", 0x400000)

14:08:54 executing program 0 (fault-call:3 fault-nth:2):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:08:54 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r3=>0x0, ""/256, 0x0, <r4=>0x0})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x805, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r7=>0x0, ""/256, 0x0, <r8=>0x0})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(r9, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000fb7bde0b000000004920ccfcfa1ba44e240000050a05080000000000000000020000071400000011000100c32000000000000000dad4d07106"], 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r8, @ANYRES32, @ANYRES64, @ANYRESHEX=r6], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f840)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r8}], 0x9, "734638ea78bbbd"})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fadvise64(r1, 0x14, 0x3, 0x1)

14:08:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  758.254395][ T9912] loop4: detected capacity change from 0 to 6
[  758.283829][ T9914] FAULT_INJECTION: forcing a failure.
[  758.283829][ T9914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  758.301009][ T9912] FAT-fs (loop4): Directory bread(block 22) failed
[  758.307831][ T9912] FAT-fs (loop4): Directory bread(block 23) failed
[  758.330145][ T9914] CPU: 0 PID: 9914 Comm: syz-executor.0 Not tainted 5.14.0-rc3-syzkaller #0
[  758.338837][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  758.348892][ T9914] Call Trace:
[  758.352179][ T9914]  dump_stack_lvl+0x1d3/0x29f
[  758.356905][ T9914]  ? show_regs_print_info+0x12/0x12
[  758.358001][ T9920] Y­4��`Ò˜: renamed from lo
[  758.362107][ T9914]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  758.362131][ T9914]  ? __might_fault+0xb8/0x110
[  758.362164][ T9914]  should_fail+0x384/0x4b0
[  758.362191][ T9914]  _copy_to_user+0x2d/0x130
[  758.362213][ T9914]  kvm_vcpu_ioctl+0x75c/0xd10
[  758.362235][ T9914]  ? kvm_clear_stat_per_vcpu+0x1d0/0x1d0
[  758.362257][ T9914]  ? smack_file_ioctl+0x338/0x390
[  758.401346][ T9914]  ? smack_file_alloc_security+0xd0/0xd0
[  758.407013][ T9914]  ? bpf_lsm_file_ioctl+0x5/0x10
[  758.411961][ T9914]  ? security_file_ioctl+0x9d/0xb0
[  758.417080][ T9914]  ? kvm_clear_stat_per_vcpu+0x1d0/0x1d0
[  758.422716][ T9914]  __se_sys_ioctl+0xfb/0x170
[  758.427313][ T9914]  do_syscall_64+0x3d/0xb0
[  758.431737][ T9914]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  758.437636][ T9914] RIP: 0033:0x4665e9
[  758.441534][ T9914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  758.461144][ T9914] RSP: 002b:00007efd7c4ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  758.469565][ T9914] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  758.477541][ T9914] RDX: 0000000000541000 RSI: 000000008004ae98 RDI: 0000000000000005
[  758.485513][ T9914] RBP: 00007efd7c4ad1d0 R08: 0000000000000000 R09: 0000000000000000
[  758.493492][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.501468][ T9914] R13: 00007fff7cba8a4f R14: 00007efd7c4ad300 R15: 0000000000022000
[  758.530470][ T9912] FAT-fs (loop4): Directory bread(block 24) failed
[  758.537014][ T9912] FAT-fs (loop4): Directory bread(block 25) failed
14:08:54 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
signalfd4(r1, &(0x7f0000000080)={[0xfa3a]}, 0x8, 0x80800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f00000001c0)="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", 0x1000)

14:08:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xc000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028018000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:54 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB="46040000685f9a98e765271dc1bc3fa408166ad46fb4976075d6208ed93f097f5e6b171b1a51116a943e447c904449e53b585d14159e98", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:54 executing program 1:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x452c82)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x98a943aab50768f2, 0x60)
write$qrtrtun(r0, &(0x7f0000000080)="83e7026dfc616b53826cd058709884751eaf236c77b566f864528f760ab5dce3fe4409f857b35cd4a2794333fd5050de5f0f02022c65c8211b03d933184763cbb2ac7523b8ee97b68bb6df59ee2ef4c43324d5327ceb2f07945684b21038db4aed1a83dd9b9fd01589", 0x69)

[  758.881689][ T9958] loop4: detected capacity change from 0 to 6
[  758.928174][ T9958] FAT-fs (loop4): Directory bread(block 26) failed
14:08:54 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
dup3(r0, r1, 0x0)

14:08:54 executing program 5:
r0 = io_uring_setup(0x6d61, &(0x7f0000000180)={0x0, 0xffffffff, 0x4})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/302], 0x20)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x82)
write$qrtrtun(r1, &(0x7f0000000080)="03212139", 0x4)
r2 = dup2(r1, r1)
read$qrtrtun(r2, &(0x7f00000000c0)=""/209, 0xd1)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r2, 0xf91eb000)
write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0', [{0x20, '/dev/qrtr-tun\x00'}], 0xa, ']'}, 0x1b)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r5 = dup3(r1, r2, 0x80000)
r6 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f00000ed000/0x4000)=nil, 0x4000, 0x3800007, 0x12, r6, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000280))
write$qrtrtun(r4, &(0x7f00000001c0)="4b1c400379ae91e6cb96dd9a83da1ebd13ed16e3d7a86a9a835c38b5f02a82e5977e3e8e7edb74535ec9e5922b8e042c5a703dcc2eaebea0279e3d121f6ef00b6cfc9259720ece170e6c140eead49da26020ff46dd7bb2f472c325335b06339b5f050fe8927e285a078f063cad64ac5295b55ed193e7b93e6cb5dbf789278f141a67b4b37099", 0x86)
sendfile(r5, 0xffffffffffffffff, &(0x7f0000000480)=0x2, 0x2)

[  758.993890][ T9958] FAT-fs (loop4): Directory bread(block 27) failed
14:08:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  759.060187][ T9958] FAT-fs (loop4): Directory bread(block 28) failed
[  759.084903][ T9958] FAT-fs (loop4): Directory bread(block 29) failed
14:08:55 executing program 0 (fault-call:3 fault-nth:3):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:08:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028027000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  759.218385][ T9983] kvm_mmu_after_set_cpuid: 2 callbacks suppressed
[  759.218408][ T9983] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  759.301027][ T9988] FAULT_INJECTION: forcing a failure.
[  759.301027][ T9988] name fail_page_alloc, interval 1, probability 0, space 0, times 0
14:08:55 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
io_setup(0x3f, &(0x7f0000000080)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r8 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0)
preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
io_submit(r4, 0x4, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000080)="955dc796bfeb62c0e93f8e212cb4495e790436ded19b54d98ada5500bd8befbe8d74987c9e7464c3e45d551bfabd1c4c89af24499b7a2d23da4f10ed352a29e389c2fc52", 0x44, 0x5, 0x0, 0x2, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x5145, r6, &(0x7f0000000140)="8c719489b3cbd278e18a791a9161a654ec0d7ea0a30487e6228b0e9f099c6ec4e035f5b3b0da26ee56c0b2fa95681dfab806e3db311041d02ccc1231c89f815aaa982e3c6b57062b6a5bac1e9202cc58994b42041bc09897a7dcdaa1eaef939c", 0x60, 0x876e, 0x0, 0x7, r7}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x4, r8, &(0x7f0000000200)="ffc07b8d06a3446ea61958afa9346bd883af112a8e8c06319cca1daa1e02ebda95d7d43033d0c12f6d6a9a76c1a7a8850cfe6101d15ef85a71f3be67031a22", 0x3f, 0x17, 0x0, 0x1, r9}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000280)="3c3e2e922d312537492e1cfd70267f5cf26d981997ddfc1ded6677ea883ce42a83ef175e6b67b44999a5bdb34573d3f9a5d6e6f741d564790da304ff516e773bccef36519f034a8e8ebf3794b24801b57709de79e0b4a71f129fd57af49d0157df11b9ce15751843ed27f1adc90aed3a3b2259bd3f1e6781939bc724aeeaa9480dee651a8db0468477f16d50cf47868d1041ef1fce62132a21892f8a0423af1f1c5a1e653c2580731f7650f7", 0xac, 0x200, 0x0, 0x3}])

14:08:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x20000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  759.358406][ T9999] loop4: detected capacity change from 0 to 6
[  759.361901][ T9988] CPU: 0 PID: 9988 Comm: syz-executor.0 Not tainted 5.14.0-rc3-syzkaller #0
[  759.373183][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  759.383251][ T9988] Call Trace:
[  759.386541][ T9988]  dump_stack_lvl+0x1d3/0x29f
[  759.391240][ T9988]  ? show_regs_print_info+0x12/0x12
[  759.396454][ T9988]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  759.402181][ T9988]  ? __fs_reclaim_acquire+0x30/0x30
[  759.407402][ T9988]  should_fail+0x384/0x4b0
[  759.411842][ T9988]  prepare_alloc_pages+0x1d1/0x5a0
[  759.416256][ T9999] FAT-fs (loop4): Directory bread(block 41) failed
[  759.416975][ T9988]  __alloc_pages+0x14d/0x5f0
[  759.417005][ T9988]  ? __rmqueue_pcplist+0x2030/0x2030
[  759.428104][ T9999] FAT-fs (loop4): Directory bread(block 42) failed
[  759.433338][ T9988]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  759.433373][ T9988]  ? rcu_read_lock_sched_held+0x87/0x110
[  759.433398][ T9988]  alloc_pages_vma+0x520/0xe40
[  759.433430][ T9988]  wp_page_copy+0x267/0x2180
[  759.433448][ T9988]  ? __lock_acquire+0x6100/0x6100
[  759.433481][ T9988]  ? rcu_lock_release+0x20/0x20
[  759.446011][ T9999] FAT-fs (loop4): Directory bread(block 43) failed
[  759.451546][ T9988]  ? _raw_spin_unlock+0x24/0x40
[  759.451569][ T9988]  ? do_wp_page+0x87b/0xd50
[  759.451602][ T9988]  handle_mm_fault+0x1dc5/0x2500
[  759.451646][ T9988]  ? numa_migrate_prep+0x190/0x190
[  759.451676][ T9988]  ? __init_rwsem+0x160/0x160
[  759.459750][ T9999] FAT-fs (loop4): Directory bread(block 44) failed
[  759.460991][ T9988]  ? vmacache_find+0x4ef/0x5d0
[  759.461022][ T9988]  do_user_addr_fault+0x8ce/0x10c0
[  759.461057][ T9988]  exc_page_fault+0xa1/0x1e0
[  759.461081][ T9988]  asm_exc_page_fault+0x1e/0x30
[  759.461100][ T9988] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0
[  759.461122][ T9988] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 66 66 2e 0f
[  759.553230][ T9988] RSP: 0018:ffffc9000abc7ce8 EFLAGS: 00010202
[  759.559305][ T9988] RAX: ffffffff8405f700 RBX: 0000000000541004 RCX: 0000000000000004
[  759.567286][ T9988] RDX: 0000000000000004 RSI: ffffc9000abc7da0 RDI: 0000000000541000
[  759.575267][ T9988] RBP: ffffc9000abc7ee8 R08: dffffc0000000000 R09: 0000000000000003
[  759.583246][ T9988] R10: fffff52001578fb5 R11: 0000000000000004 R12: 0000000000000004
[  759.591226][ T9988] R13: 00007ffffffff000 R14: ffffc9000abc7da0 R15: 0000000000541000
[  759.599211][ T9988]  ? _copy_to_user+0x80/0x130
[  759.603926][ T9988]  _copy_to_user+0xef/0x130
[  759.608443][ T9988]  kvm_vcpu_ioctl+0x75c/0xd10
[  759.613133][ T9988]  ? kvm_clear_stat_per_vcpu+0x1d0/0x1d0
[  759.618780][ T9988]  ? smack_file_ioctl+0x338/0x390
[  759.623820][ T9988]  ? smack_file_alloc_security+0xd0/0xd0
[  759.629491][ T9988]  ? bpf_lsm_file_ioctl+0x5/0x10
[  759.634439][ T9988]  ? security_file_ioctl+0x9d/0xb0
[  759.639559][ T9988]  ? kvm_clear_stat_per_vcpu+0x1d0/0x1d0
[  759.645201][ T9988]  __se_sys_ioctl+0xfb/0x170
[  759.649808][ T9988]  do_syscall_64+0x3d/0xb0
[  759.654263][ T9988]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  759.660169][ T9988] RIP: 0033:0x4665e9
[  759.664070][ T9988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  759.683681][ T9988] RSP: 002b:00007efd7c4ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  759.692104][ T9988] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  759.700083][ T9988] RDX: 0000000000541000 RSI: 000000008004ae98 RDI: 0000000000000005
14:08:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002802a000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  759.708063][ T9988] RBP: 00007efd7c4ad1d0 R08: 0000000000000000 R09: 0000000000000000
[  759.716039][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  759.724034][ T9988] R13: 00007fff7cba8a4f R14: 00007efd7c4ad300 R15: 0000000000022000
14:08:55 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x20000083)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x36, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x7f, 0x7, 0x110b598e, @device_a, 0x8001, "", 0x0, 0x7, 0x2, [{{}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x29c0, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x208, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x6686}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x1ff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5822}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0x0, @any, 0x5, 0x1}, 0xe)

[  759.812580][T10011] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  759.826455][T10011] kvm_mmu_after_set_cpuid: 1 callbacks suppressed
[  759.826470][T10011] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:55 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000001200)=""/102400, 0x19000}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/180, 0xb4}, {&(0x7f0000001180)=""/34, 0x22}], 0x4, 0x101, 0x9)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x30000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  759.932359][T10022] loop4: detected capacity change from 0 to 6
[  759.969320][T10022] FAT-fs (loop4): Directory bread(block 44) failed
[  759.981352][T10022] FAT-fs (loop4): Directory bread(block 45) failed
[  759.998017][T10022] FAT-fs (loop4): Directory bread(block 46) failed
14:08:55 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2482)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  760.027275][T10022] FAT-fs (loop4): Directory bread(block 47) failed
14:08:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028043000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  760.096183][T10031] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  760.104596][T10031] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  760.158911][T10031] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  760.194932][T10031] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:08:56 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="2303e42e414ffc14501a1aaf", 0xc)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x80ffff00000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  760.303191][T10048] loop4: detected capacity change from 0 to 6
[  760.339075][T10048] FAT-fs (loop4): Directory bread(block 69) failed
[  760.378073][T10048] FAT-fs (loop4): Directory bread(block 70) failed
[  760.420960][T10048] FAT-fs (loop4): Directory bread(block 71) failed
[  760.443617][T10048] FAT-fs (loop4): Directory bread(block 72) failed
[  760.451012][T10057] qrtr: Invalid version 35
14:08:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x2, 0x541000)

14:08:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280fe000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  760.487019][T10058] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  760.496085][T10057] qrtr: Invalid version 35
[  760.508310][T10058] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x81010000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:56 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x83)
write$qrtrtun(r0, &(0x7f0000000040)="0816130896b227c631b5e0752a266620f75136daf8da127fb2c7e2a7ff01239eebb67f060e661709521121eab2c74e9944c3a996a8e2576e7ce6830a6270717b1101", 0xffde)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000)

[  760.683609][T10078] loop4: detected capacity change from 0 to 6
[  760.733255][T10079] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  760.740270][T10078] FAT-fs (loop4): Directory bread(block 256) failed
[  760.749697][T10079] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  760.776457][T10078] FAT-fs (loop4): Directory bread(block 257) failed
[  760.796554][T10078] FAT-fs (loop4): Directory bread(block 258) failed
[  760.813099][T10078] FAT-fs (loop4): Directory bread(block 259) failed
14:08:56 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@nfc_llcp={0x27, 0x1, 0x1, 0x2, 0x40, 0xb8, "9b6e0258056ff938375fac6bcbab7ba542c6c48c73ab3a04674a5fd197fa870e159f3fa301a1b240ba7eff09346887478084b01f2bd70cae46aa747d1d6636", 0x27}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x10, 0x541000)

14:08:56 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="03212139", 0x4)

14:08:56 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
write$qrtrtun(r1, &(0x7f0000000080)="668e237c64aaa7cbfd12b237b127d6cdb5aea5648c991a189162c27b8d14c2816f377e8a5619fa71f151eb13e41fb0ceda3befefb49a0fb77350c5092ab3a67aa5f05ca6b73eb6e511f53353d1e01a80cea93b19853c696bf25e8266231ab1d2fdaeff87167ad6450914cae4cec411d6172195c4be7cff82607a92d73cb08dfa2adaf2122680f474ca31a73daf964b2000df4738a0d69a4c6f92777354f246f81e5d90389011f41e8350f4d2507c653fe41294d808baf7baa78f19cf08", 0xbd)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:08:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000030240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x100000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:57 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
open_by_handle_at(r1, &(0x7f0000000080)=@nfs={0x90, 0x24, {0x9, 0x521, 0x200, 0x80, "6cfa8b951d1c740586a3ab3e7b0155654566d1a2c03bb31e843b9d6874525d991f2866ca5a7c68266f0d198d455833cb67ef19bd9d07c01552b8eba160ea6fc3410c9b7fd3583997e926a3ae1cf2fd8b39878bf599bd9ac23a175b2b2b758776eb4180d9abcf5f810dd34ce3c80cf763f42320f9ad04647636011f3db5ff6360"}}, 0x10000)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4c00, 0x541000)

14:08:57 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x4ac2)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x21c1114d1bb86853)
write$qrtrtun(r1, &(0x7f0000001080)="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"/4134, 0x1026)
pwrite64(r0, &(0x7f0000000040)="e7972c56b8dedc3e61ea2fc2eafb8d4cfda49b8bbf59f4aca9a2699fce3e6d528e73623d1c5c2c21c3dd2d446bd400a69d2270af77838ff9066ad95d9107988c81490ffa8d191e4fae477ad0fb058f488c3692b7b3b5646ed6dd2ebacff5e72a33219071caba13a40de33bfeac47fa6108dab81429a355f14c33b70db3d29143e58c3f65", 0x84, 0x5)

[  761.098221][T10115] loop4: detected capacity change from 0 to 6
[  761.172348][T10115] FAT-fs (loop4): Directory bread(block 770) failed
[  761.181873][T10116] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  761.194740][T10115] FAT-fs (loop4): Directory bread(block 771) failed
[  761.228184][T10116] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  761.237725][T10115] FAT-fs (loop4): Directory bread(block 772) failed
[  761.270243][T10115] FAT-fs (loop4): Directory bread(block 773) failed
14:08:57 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
dup2(r1, r2)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
pwrite64(r3, &(0x7f0000000080), 0x0, 0x6)

14:08:57 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
write$qrtrtun(r0, &(0x7f0000000080)="4ba4052d218b566ea2386f88cf4259feb3b52e38cda8b32a3e96cf87489090137bbd8ea8c418e726c855a154c673568f3b846cc4407db63508abd515ec98f429f5bb26968809edbc40d3579ab36d547bcabb233d38e743193a8192383afa3cdfbae0bf85368901d64b358f71d1889cbb58569379e7c4118275ceb0bce91323d8053e2d8432942d05e3d0a1e31d3a13b3141ec758d3adbebd71b591dc593d75ad3cc49db4f01af4693da977c51322f344f8235887f96cf1d6bf539b8d2e55fdb1757c76a62e14e7", 0xc7)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x121100)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x981800)

14:08:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x100004000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  761.500917][T10146] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  761.537958][T10146] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:08:57 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="7cd5f830bf0e000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff000004005f000a00060050505050505000000a000600505050505050000004005f000600360003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @any, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000880)=ANY=[@ANYBLOB="46040000b075cec812fa39fcfec007965a69c7d8a2e9242712b6a1044610d7782f2c53c9d48fc2f614c6c1d831024593da2e3a3773b4f06c4864066001a81ee299c65612360c0a3ea8a77225470379ff3ba4f7a9bdba48816b6792db09ec6648d90a0902566e5021562196197518b9d1fe7e644cd848d43e576dafa6fd126ccf452a612602f3e1a182421a9ea701f9e12416197404b05e113f25b4f871bccad170bee1210d5bded2e8edf6ec81ca25ed1ef1298ec8399965652ab107b2", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00003b2000/0x4000)=nil, 0x4000, 0x1800005, 0x20010, r4, 0x51b28000)
preadv(r2, &(0x7f0000000580)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f0000000780)=""/221, 0xdd}], 0x5, 0xff, 0x86e)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:08:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028040040240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4c01, 0x541000)

14:08:57 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@\x99'}, {}, {0x20, '/$:'}, {}], 0xa, "140cb4946e1ea8840c1eccc7bc1bdf3cfafa3a644eeeca8e038f6c1787a8836f792c437c1d520ff572e6dcdaab0ddda582e07e0d5d0b0fc1c6e13c3c50ef3c494b58e4fcb811759204cc"}, 0x5e)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:57 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="7e6d6f985c41847f5b282479c435a230a7fc3700107669827c215232ad779f7f9d8545a6e579663675edc11a993bc154afa8de6f7f0b24a36eaeb2f3dfc0dd1d3ea2ec82bbc5bca49dba1d7e2fc6393e05aee9226eb2e082927d8875d7379f354159dee556d6d711ec4df70b12320b29d589fee7de0428d486d3b75d866077", 0x7f}], 0x1, 0x0)

14:08:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x100008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  762.116876][T10172] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  762.134773][T10180] loop4: detected capacity change from 0 to 6
[  762.175477][T10180] FAT-fs (loop4): Directory bread(block 1090) failed
[  762.176433][T10172] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  762.192601][T10180] FAT-fs (loop4): Directory bread(block 1091) failed
14:08:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x541b, 0x541000)

14:08:58 executing program 1:
ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000200)=0x3c3235da)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="d0e5f30fa7c0260f7865006766c7442400934100006766c7442402b4976f5b6766c744240600000000670f011c24baa10066edbaa10066ed0f2c290f01c5ba2000ec2ef30f2cd8", 0x47}], 0x1, 0x4, &(0x7f0000000140)=[@dstype0={0x6, 0x7}], 0x1)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0))
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  762.219003][T10180] FAT-fs (loop4): Directory bread(block 1092) failed
[  762.252836][T10180] FAT-fs (loop4): Directory bread(block 1093) failed
14:08:58 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x810, r0, 0x8b807000)

14:08:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000050240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x10000c000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x5421, 0x541000)

[  762.542861][T10215] loop4: detected capacity change from 0 to 6
[  762.543141][T10211] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  762.572748][T10215] FAT-fs (loop4): Directory bread(block 1282) failed
[  762.578197][T10211] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  762.586432][T10215] FAT-fs (loop4): Directory bread(block 1283) failed
[  762.601567][T10215] FAT-fs (loop4): Directory bread(block 1284) failed
[  762.615911][T10215] FAT-fs (loop4): Directory bread(block 1285) failed
14:08:58 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
r3 = pidfd_getfd(r0, r1, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c0}, 0xd1114dc3edf5103a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf252700000004012a000a000600ffffffffffff00005000000a000600505050505050000004005f000600360003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB, @ANYRES32=r5], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r4, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ueagle_atm', 0x1, 0x192)
mmap(&(0x7f00001e2000/0x4000)=nil, 0x4000, 0x1800003, 0x10, r6, 0x0)

14:08:58 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000080), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:58 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="d3a99cbf5051af5632748b8982", 0xd)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x18000, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000140))
write$qrtrtun(r1, &(0x7f00000000c0)='\x00X\x00\x00', 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x10380)

14:08:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x5450, 0x541000)

14:08:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000390240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x100010000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  763.143484][T10248] loop4: detected capacity change from 0 to 6
14:08:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x5451, 0x541000)

14:08:59 executing program 1:
statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc10, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000006,mode=00000000000000000000005,mode=00000000000000000000004,mode=00000000000020000000001,mode=00000000000000000000006,euid<', @ANYRESDEC=r0, @ANYBLOB="5ced5ee99490af60f4121b6c880c43742e9ec7b1e5185b2c00"])
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r1, &(0x7f0000000040)="03212139", 0x4)

[  763.185814][T10252] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  763.219432][T10248] FAT-fs (loop4): Directory bread(block 14594) failed
14:08:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x10d000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:59 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f00000000c0)={'L-'}, 0x16, 0x1)

[  763.275537][T10248] FAT-fs (loop4): Directory bread(block 14595) failed
[  763.312846][T10248] FAT-fs (loop4): Directory bread(block 14596) failed
[  763.354077][T10248] FAT-fs (loop4): Directory bread(block 14597) failed
14:08:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x200000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x5452, 0x541000)

14:08:59 executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40)

14:08:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000400240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:08:59 executing program 5:
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:08:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x5460, 0x541000)

14:08:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x300000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:08:59 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}]}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)={0x204, r5, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e74b28d2fdb858c39e66e892f15ae755fa6b620bf49cbf29"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "97c7a602de990854ce02ebdc38506d954b3b499e860204de"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "16e409fdbe1227128a6e724a8c137ff887e7608c4b732cea"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "703edc68e82f66098474a0a7321b8d43897cadb5f4fe64d3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0accbebf858af50c363cf5c5f3294bc37216e7508f032f6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43aea66d03a57da33b4baddfe3c3414322d05333070e3380"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a7a485365f39d03177403933876aec729a4861a64402893f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d3bf3d224846a4acee8106f1676cb3751ee2b952ceb0fa99"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2f912f4cb5dee960faa6a4b4f6136071de1d72a024bb3d6c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "57f9785a2648014bc95a5e5ab091e90ba03df3f70b8040d3"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x204}, 0x1, 0x0, 0x0, 0x50}, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  764.180627][T10326] loop4: detected capacity change from 0 to 6
[  764.236030][T10326] FAT-fs (loop4): Directory bread(block 16386) failed
[  764.257902][T10327] kvm_mmu_after_set_cpuid: 4 callbacks suppressed
[  764.257918][T10327] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:00 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  764.280943][T10326] FAT-fs (loop4): Directory bread(block 16387) failed
[  764.288026][T10326] FAT-fs (loop4): Directory bread(block 16388) failed
[  764.301117][T10326] FAT-fs (loop4): Directory bread(block 16389) failed
14:09:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x6364, 0x541000)

14:09:00 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = pidfd_open(0x0, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x40)
ptrace$setregs(0xd, r3, 0x0, &(0x7f00000001c0)="b315cb510a38b641ddcef97a64253da6e08100000000000000000000030000000000009eb34a9a0f72cc1a92b9a91b96527b750b667f27b148143b1aa7192ed99b490d70d532cf6bfa4a555da48022ef89248492cb6a1e13b06ccc3d2d")
pidfd_open(r3, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fcntl$dupfd(r1, 0x406, r2)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x400000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000500240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:00 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
write$qrtrtun(r0, &(0x7f0000000080)="030987e0812ac5dab48869ab316bdde1ee1fc594d2d8ddc4790af598a340189785f94f096f345d35ad7d4ec2c05b3c7f0c2e1896fd4b0ba78454eedc968b5b0923271f14df4479ce4131185ddfc2a3e42cf903a501835c7b9f74ffe85574e238ffa05850ead33b04e6eceb13e6e7194a441f6c5dbacd9277ea9e0911b8bb878d5de386a40274d4cd56bfd5d13b73084f377c6cf7226685282cfacd45866789652b1969533aaa41132e2063b808b9ba1d9e951bffc984fc7a34b62a96b24d23e4857be58bbb6c71e30c5b40d7cee3ccdfc29cad23daeae47a0aa5c6720aa9c35e3836201f5cebbc7addd015479cca99fcbf5c552aafcc", 0xf6)
r1 = epoll_create(0x8)
fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f00000001c0)=']/)%\x06\x00', 0x6, 0x1)

[  764.547119][T10357] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8901, 0x541000)

[  764.613264][T10365] loop4: detected capacity change from 0 to 6
[  764.638971][T10357] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:00 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xffff, {0x9, 0x5, 0x2, 0xffffffc0, 0x7fffffff, 0x8001}})
write$qrtrtun(r0, &(0x7f0000000100)="0321394a1466259827970958c9fda1389381d599c727993c4dee03bca77c2befb6fc667e0c341bc39dd271ae65e341f0491464c157b7fd90fa2d9bd87863a2cf76974f7e856c0ebf78895ec1a2484700c0e6842c01", 0x55)
write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0xf9, 0x3, 0xd7c, 0x7f}, 0x7, [0x5, 0x9, 0x20, 0x10001, 0xfff, 0x1, 0x10001, 0x2, 0x3, 0x800, 0x7, 0xffffff7f, 0x0, 0x39b7, 0x7, 0x8, 0x0, 0x92f4, 0x2, 0x10001, 0x0, 0x6, 0xb7, 0x2e4f, 0x6, 0x10000, 0x1d, 0x0, 0x133, 0xfa, 0x3, 0x8, 0xff, 0x7a5, 0x9, 0xf1a, 0x6, 0x1f, 0xffff65cf, 0x2, 0x6, 0xe349, 0x1770, 0x1, 0x3a17, 0x1, 0x7f, 0x80, 0x0, 0xfffffff9, 0xbfc6, 0xfffffffb, 0x7, 0x9a9, 0x6, 0x7, 0xf25, 0x6000000, 0x4, 0x3, 0x4, 0x5, 0x7, 0x7fffffff], [0x7, 0x1, 0x1ff, 0x7, 0x5, 0x1, 0x4, 0x2, 0x93f6, 0x9, 0x5, 0x7, 0x4, 0x14, 0x7, 0x6, 0xfff, 0x89, 0x4, 0x81, 0x7ff, 0x5e, 0x7f, 0x5f0, 0x6, 0x200, 0x3, 0xfffff001, 0x9, 0x40, 0x3ff, 0x80000000, 0xfffff16c, 0x6, 0x7, 0x5, 0x800, 0x8, 0xb344, 0x6036, 0x0, 0x2, 0x2e0, 0xfffffffc, 0x4, 0x1e, 0x1, 0x400, 0x7fffffff, 0x7fffffff, 0x7, 0x6, 0x2c4d000, 0x7, 0x80, 0xbd, 0x1ff, 0x3, 0x10001, 0x9, 0x3ff, 0x36f8, 0x3, 0x3], [0x80000001, 0x40, 0x10000, 0x0, 0xdb1c, 0x100, 0x8, 0x20, 0x100, 0xf502, 0xfffffffd, 0xffffffff, 0x3, 0x800, 0xcd, 0xe53, 0x101, 0x8001, 0x4, 0x9, 0x6, 0x8, 0x5, 0x7, 0x4fb9, 0x7, 0x2, 0xbe6, 0x6, 0x1ff, 0xaaf, 0x2, 0xd136, 0x1, 0x0, 0x4c, 0x4, 0x4, 0x5, 0xff, 0x5, 0xfff, 0x1ff, 0xffffff15, 0x80000001, 0x8, 0x6, 0x2, 0x8, 0x2, 0x6b63, 0xfff, 0x7, 0x9, 0x6, 0x3821, 0x2, 0x1a, 0x1, 0x80000000, 0x3, 0x9, 0x7, 0xffffffff], [0x4, 0x8, 0x40, 0x8001, 0x2, 0x4, 0x100, 0x9, 0x80000000, 0x9, 0xf0, 0x8000, 0x2, 0x0, 0xffff, 0xdd2, 0x9, 0xffffffff, 0xfffffffb, 0x199, 0x1ff, 0x5ad493c0, 0x80000001, 0x4, 0x6, 0x1, 0x1, 0x3, 0x6a74, 0x2, 0x1cfc, 0x7, 0xbbb, 0x1f, 0x6343800, 0x3, 0x0, 0xec03, 0x2, 0x7, 0x3, 0x1, 0x383, 0xff, 0xfffffcf9, 0x10000, 0x81, 0x4, 0xc66, 0x7, 0x80000001, 0x81, 0x10001, 0x8, 0x9, 0x1, 0x6, 0x0, 0x101, 0x7, 0x2, 0xfff, 0x8, 0x20000000]}, 0x45c)

[  764.677185][T10365] FAT-fs (loop4): Directory bread(block 20482) failed
14:09:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x500000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  764.725004][T10365] FAT-fs (loop4): Directory bread(block 20483) failed
[  764.756970][T10365] FAT-fs (loop4): Directory bread(block 20484) failed
14:09:00 executing program 1:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x8020)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400200, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @xdp={0x2c, 0x1, <r3=>0x0, 0x23}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, @llc={0x1a, 0x30f, 0x7f, 0x3, 0x2, 0x7, @remote}, 0xfffa, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='ipvlan0\x00', 0x7, 0x4822212d, 0xab})
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x200, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x8}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_OIF={0x8, 0x5, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x840)
write(0xffffffffffffffff, &(0x7f0000000300)="f63bed3cf30e3d6c543a6629d8f22060933d19f62f7417b2ca6804b0b8775e52114284285121825c2167e46605e9fbcab5f3f3f794aa27584347278e56daad9106c27ba3603538b5b257b1eeb8e8ba1b49d6c4b893364015e5535113ea0b06f6e607a6612dd884244dd6cb73aa19522c3a308bb41693567f155b6b5b018db86d2a6685de4da28b398768bbe73cedbaffa46d8e8727df4afbd6a87b0966a0157bf4fecb4dc167b01e7572de075db6ae9197831b04e819cf87f2baa4ac4372c2a407118bcc0c3cda1e53278f03546aaaf04d65d08675633d1baaefe32d01b22f8dd4c35cd9ee3a597b959e58a096bee2b08ebb3a495b4fd7d633deedc8c98db4", 0xff)
write$qrtrtun(r1, &(0x7f0000000040)="02edac03", 0x4)

[  764.864409][T10365] FAT-fs (loop4): Directory bread(block 20485) failed
14:09:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8913, 0x541000)

[  764.978412][T10390] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  765.003647][T10390] kvm_mmu_after_set_cpuid: 6 callbacks suppressed
[  765.003662][T10390] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000510240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:01 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000100)="53ef71b0c26642ed9c548499a2e5bcdcfef1ad687700bc5868790d243f5e356b31191074329a79c6ae5eceb863572baef6a3f4d876bbf9fb1f38328301cec1032ef2cc5f33b082b336f8acba5253fc9cd726b5302f9800"/102, 0xffffffffffffff17)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')

14:09:01 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r2 = signalfd(r1, &(0x7f0000000080)={[0x10001]}, 0x8)
write$qrtrtun(r2, &(0x7f00000000c0)="8438c0cba202aad2466da0f1b201e85db28a61f1aa1507225f91b1d5d4eed853b2d463e6961b007202d48918839b0e0a70ee38b575e4cef3f57041e82f993232cac0e4b1803bc1dfb4000f901afe44a10d8919088f4d29cb795240af601ba9647901bb268bb2d13fbbf05a002da70ac97a6e660c9ba722f8611a262ba010d6321a241651ab78ab2993ac7f6e041236542d919e3622aa47ef87ef88c8e70321a3b7f82cb7ff97d219ab01e1e4f88360448a1ec932dbc35d1b6dc9b02ac22e26fe0f71aa7cfdceb0bb4020eab4cba30ae93fdbb0991940531801", 0xd9)

14:09:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x600000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8914, 0x541000)

14:09:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a008201000000020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff0050515000000a0006005050f9338ca6491d7dc350505050000004005f0006003600000000000000000000000000000000001a021b574466fcfbeb77bb9d7d70a6c6d382cfa6be42e366f67afc131764c463044ca8210ea80f8b207ee5b177b8a049747dc8fc67f81d4317cc90bfba7486259af7b298d57b2d90bf41b4ff0a4d76003aee9b42c2ae452e3cdda012a634c6c2508cc322ab89fe6bd9030f99d7d2b1c2d4e349a28c20cecd78c45a1fbdb83140e073007927e00bf9177b1ce76ed49b4dd7d08457e9ed8cd2669f888f7407cf6decc725d88823e470b2d598c5af99b7bd8c444e212d0fb2fbe83d762c822aac7ff0c72bf52acd0005b68492ec25fab374d9e1499a8cd5eb4b7a3a7f45c6f325733b97bb31aeae0a2a82ea98"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x384, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, {0x10, 0x8}, {0x8}})
ftruncate(r2, 0xf47)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="60040001ac90fb5aff2d7493d3c4758333ee1ec8368b485cc8ec9d7373f77973a2898c72463e7d559694f2a456b013c15a9e7834515f7a38ffd9a98b3f13bee1d68de6b161a1125ad303950848d43464119651a817c83530", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  765.223987][T10418] loop4: detected capacity change from 0 to 6
[  765.268081][T10418] FAT-fs (loop4): Directory bread(block 20738) failed
[  765.285354][T10421] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  765.291662][T10418] FAT-fs (loop4): Directory bread(block 20739) failed
14:09:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20042004}, 0x4080)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x1}, {0x5}, 0x48, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="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", 0x130, 0x0, &(0x7f0000000380)={0x2, 0x91, {0x0, 0xc, 0x7a, "34eae70e7c4c6397a3e99d5449c1c5ac164b7cf68ea440890de24154a2cef44ae23976201b3dcd6451c76e57a437f7adb88896cc9709733dd22eedd2f45830b738850689040e40a71abbe1974033c1455c7c89fa153a792894c7698de1a1a06656222d57c11102831597391f22ae16965b3c242085637cbd2975", 0xa, "742692cc8f1c57e81b62"}}, 0x9d})
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f0000000040)="03212139", 0x4)

[  765.331215][T10418] FAT-fs (loop4): Directory bread(block 20740) failed
[  765.354821][T10421] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:01 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
write$qrtrtun(r0, &(0x7f0000000080)="81231b6c2b52f55aab6a7c55fc155b0719eddbc5c76f0479c5ee77a4a34ed1752b34793b999c5908999e45cd6a05e7791a43172c5521dd058e4057c7278ec05906293bd19173f4d96444bdf1e529375db054c07b2f5dc24b2ef00cc55d322f4af902036bfb66bbf634092daa9416c7ddcdbff308a956b4368d88f4cf41faa4117cb3179cce73b63ea3b123310597d3aa6c59ca43534f36b05c9c6883d84678fb37b6ac2e14", 0xa5)

[  765.379946][T10418] FAT-fs (loop4): Directory bread(block 20741) failed
14:09:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8933, 0x541000)

14:09:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000520240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x600008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:01 executing program 5:
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:01 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>0x0, 0x29, 0x0, 0x81, 0x0, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x20, 0x1, 0x1, 0x7ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
io_submit(0x0, 0x3, &(0x7f00000007c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8000, r0, &(0x7f0000000540)="9bbd71f77e15c7a41b551cd4fdbf42856f76786a34c2a2a586d46bac63683064d5bf6e8175a05a987bd1d87dcf9d1c73ee18ee5fb493a781934528f54ca5456f2a25dce181a977c2ad83a2d825d512809c64407a8e63204edf69fe3675890c65", 0x60, 0x7, 0x0, 0x1, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0xffc1, r4, &(0x7f0000000600)="99daad5c92784c653b83", 0xa, 0x7, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f00000006c0)="aa9c5b8d4d6dc0c4413afdb7f92be98b8e8f3541426720fb22b5314b0079cf9bac3dfd45055d118f952d422e2ab3e8f3a0e30dcbb6834f4e089eec3aa7a037edf0c9d4f6410f3d4ab9b4b025c5a553fc7350b3a9d24e9e895403ea9db8f1747749e058f7ac94ad5237b62e1c5991702719118696d3f261ea972ded9169498ae4a8cbe75953cbf8dad69dbc9e5bda8d5ad1da76ce2d04f7ead369fbd8b2c264e5a6b042ccd260d2", 0xa7, 0xffffffff80000000, 0x0, 0x1}])
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, [@exit, @map={0x18, 0x0, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x0, 0x2, 0x3, 0x2, 0xfffffffffffffff4, 0xfffffffffffffffc}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_val={0x18, 0xf, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x36}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @ldst={0x2, 0x3, 0x2, 0x9, 0x0, 0x1, 0x10}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x60, &(0x7f0000000240)=""/96, 0x41000, 0x10, '\x00', r3, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0x9, 0x8}, 0x10, 0xffffffffffffffff, r4}, 0x78)
write$qrtrtun(r1, &(0x7f0000000080)="543495e795ee4c40f9f9611c674ae7b6e0d284cee15ba804f13c09abc7bac923d2806c09e935dc1fd7e291d06e087236c7dcf2ab38960cc0375898b8e7ab094b2ce8b500fea4ce807a95fec2ed34f59ddde18b260ffc99fab069fbfe09a5d41c86f6bd2ce1978f3e4683aac6784b988f45708a539e6152cfae3eb9aa8ecb153f90e18d4da50659705e5752b7c1", 0x8d)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r6 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ppoll(&(0x7f0000000480)=[{r5, 0x40}, {r6, 0x108}], 0x2, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)={[0x7]}, 0x8)

[  765.668601][T10457] loop4: detected capacity change from 0 to 6
[  765.717491][T10457] FAT-fs (loop4): Directory bread(block 20994) failed
[  765.729471][T10457] FAT-fs (loop4): Directory bread(block 20995) failed
[  765.745197][T10457] FAT-fs (loop4): Directory bread(block 20996) failed
14:09:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae01, 0x541000)

[  765.761464][T10462] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:01 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x242082)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)="fd7321040ffc2947f56c5784b796e23e44c60a90d4e1729e4a53b8792a7f9d447d3c646eccde148edbc4f8fee44087b0c808a13f8133268a4ce6b90978bb1cff90a5c4c4fbb727ed76724f36a42d53108fe56025817dcb105e2393c493d6035f2db19df3dae012547b981756669152ce306ef4ff29439afdb2", 0x79)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  765.796163][T10462] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  765.815888][T10457] FAT-fs (loop4): Directory bread(block 20997) failed
14:09:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000530240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x700000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  766.130682][T10493] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  766.139422][T10497] loop4: detected capacity change from 0 to 6
[  766.162772][T10493] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x541000)

14:09:02 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$FBIOBLANK(r2, 0x4611, 0x1)
preadv(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/6, 0x6}], 0x1, 0x100, 0x5)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00001d4000/0x2000)=nil, &(0x7f0000739000/0x2000)=nil, &(0x7f000072f000/0x3000)=nil, &(0x7f000017d000/0x1000)=nil, &(0x7f0000219000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002ca000/0x1000)=nil, &(0x7f0000403000/0x4000)=nil, &(0x7f0000240000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000240)="db4bc9eaaaae4ee4a1fafbe1c2356aa1593b38", 0x13, r3}, 0x68)
write$qrtrtun(r1, &(0x7f0000000080)="12859b364b37e7d64defc32f8e1f3a4215dfa475c66838c6a2c2b8991e29541498f2750cb7bac87040cf40c55c8c4e6da27b7b8ffda3a61c1d1c02774b71ed2ff174a0aebd", 0x45)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

[  766.196245][T10497] FAT-fs (loop4): Directory bread(block 21250) failed
[  766.210638][T10497] FAT-fs (loop4): Directory bread(block 21251) failed
[  766.234568][T10497] FAT-fs (loop4): Directory bread(block 21252) failed
14:09:02 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, 0x9, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = signalfd(r2, &(0x7f0000002440), 0x8)
write$qrtrtun(r3, &(0x7f00000050c0)="c8e679a340d95676b0f22e1461fb040d2cc7656b7a5010696dcc54d0c04d18e6cb6ef69f33a4fb0ab59f6ece3340eeab8b177f06fd0d81f8d7bad2d67f7aa382d8827fcc094267be980ba6c50cbe34e7e3a623c06dfa1f34032c681aa3715bc6e89aa9267ad508a37e3cdd9c0c3617fe0226db1af484b7d16f07162f0a1f57b5a37ac25cfdb14363d7562f57", 0x8c)
sendmmsg(r1, &(0x7f0000005040)=[{{&(0x7f00000012c0)=@ax25={{0x3, @bcast, 0x5}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000001340)="8502c337e837b41461d685191fcbc15d034b7e9046c0242b0cb181db534b49c8f89324c93a3420cd5c4095b7a5373f4f149349144a07d180abbafb324c1ba2bf290ebac1fccef428ba1161fae20eb971e9da22dc96e83c234c7e4eef08a2e02fd2b761e9a3a341e877ce3a2bcf87a9a7de457de721b1f98be7f51975ea33ae5d719b98e8bf58b56aa04a", 0x8a}, {&(0x7f0000001400)="07c03c50ba2b0a05322f5fe40c1b2b26741f4348edc184cb44eb88c85025daedfd28", 0x22}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002480)="b925ce8ee09948da67", 0x9}, {&(0x7f00000024c0)="5430ccaaeb080d433de569e0be99b98a7eabe06b2da78b0cc20c319c97fcdc26d4d9e591d414e52430ee827d818f1c3f086928833cb4910a6b9a962ac3007a6e0859684a53b01a461f01b78d656404718fae5980fb5bd68f332f622dca2c781ae25953f98491b553ddead7399166d4453695409b40e9479deb7069dc7ee94caa305aabee2d11c7056b2dd6b7bb2f9e0e619ecd4db7452b03aca7cdf2a205a51e8784fba6", 0xa4}, {&(0x7f0000002580)="5bb7b2b88d49ccba1f6245f9a10c26b9e27aec688c5f3ced787e9c4722345ffb388919c49f04a58026d5a0baf0b5c3b2cc8c09eef132643d0a936da8d6397990edb206074dc8a2f96f", 0x49}, {&(0x7f0000002600)="1d43d35730e4737d07ca1c82044f9952b527de6577c94f0721ea83921d306a208bf599a58cb030bf721be71407833eb9fbcdfa3e11f31011e60b3c3be4afa1debbe4c82685fbfb368b85e8bcdeee2a755aa5e1049c408d34968e208d5429f29bbc09adbad4165e05816be3e9e323768bcd87afb5d73479ee6cf611879f478b49bf80536e175aa2e318c6435ce74b0f5359c1532ef38cfbc617c44e85e843", 0x9e}, {&(0x7f00000026c0)="bb4c114ed522e18234b6af03ba907121f58f737ead9f99ed31091b718b9bb26e4b3f67fe177ad6071c73a357f0b12fd9526b142e8ffaf5892291f46aa36a88db310828f8043d3cf826c854e57fb6ae7f9e82042922bab078433553c9cca23f6f3fe700429b552265b88c6e3a781eca043dfb79dbb167ac481046b3c0bb6215b6173c0a5db3a0a54e5d6cf7bb6982b148dfedacce290f126b4cbf0a872fb9ccd479c6077144c3d1827e938f0a5edcd9cea6418a0f44343c63d01d07bc5a32342f7f746fe53589689c52b0c5e185f69d86c516f0f8ba803ec41b256e688f03e1b87413bc77e465168568d2385b792d1d1ed366779f05dc2065a8e283645073928f0e525e9a8e222589183fbc8e41aba3b02ad69230508db046e739273eb213106c7ccb1fa7ae10cd6419aa23fecbde9537ff019345e9efb3676df0b9daed304d70c39a08009ef8d774736f3b25c54e59b5ecf80e9426dbf5f727c4d6b6834d0466c4ca85b0d0efad527ee854db4dc84977878842b8f454e26c3272abd17f71c0d62bf7ddf4c81af40b85febf325d03844916137593767840a9f4dd93cd5c2472670b91b938d8180145cf8ac99ef5d78f054d09b4ba774b109a25780211c1fdfa1da1fe726e83c23b077f52215656ace85b0ee5eb39343daa531fe4cef54ca681921f6ba3a12879f259ac2f2df1a648feafb3b324af87f64c21c2a3b7e7fc57e901e6faeb739a3b67a54e64c1718fc6cd387012ef9f27c2b8b4aaa593e681dc68ac5de5aba98f550e1b2ad11d4bb43de1981c32a353209c7cc376a04a6b8a159e158a6d18ede7cd0779aacad804ea40890ec3f28e94fb65109cc2f9587e7f22c81402fe47e3b6085e29aed7c89146f56ef9f5384833506adcdf5c9a5adf76003694b7ef875a32ca5bffe0d6ca9b83af4b12413f256defbea4179c7968629de5dfb6513f0c7ad0b370667149c312840aa311e90fbadcf38891447a235396413547cfec4e4c500f9ab1c92693b27b2f8b0137191bd923d62f0b4b4d3312ddb96b63009818429fd9da8c08bf17a03777fdee6080cb39ccb03be53f19b7b75caa731c7876ba2468735979cbb551ae15c4d6258f43700a30a7d79e38c355211ba3c3f64dace0f72528905e0a646f8719dc1e632ec34edd6529cd1a2a419839ac4e96f556abd8a988b93721e496aefcc398a733727c020c1eca0732af5c2d2f28777ccf9760228c1cb721ef28db7f879a2922d2f2eb942f9770674f4563d6157aa55761ebc514dff6431dcff6897f9826be0b3735964a347049e632c8f099b1b7cbd01f0eac4a40c465c6321887d89f2eb1f69acbaf5fd33355c6ab982b48ff475f887168db6fbf8bcba0db0f2dcffea05e8aadce572f0640a4f207e43bd16532ecef622c2ef610a23ecb3b90490d656fe13db479130eabb9171a8481e652e5fc5cea65faf1390411e5b281b4c9e255ad343a796a812a759cb484f39e43b8627012bff4c78db5df8df2e3de1e8ae4ab77c88b1f043298192c62d3e37eef3264d4bf5eb1839966ef06df1c27c6596e89dff44d46a809d088317e0558e4884d96f91a81a9196c6875a75931ad81141d9fbeef45b53faa4fc1b4df70d599ce6f65097792cf30d8963dbeed7f8379168021cab886ef7e1d68680092c0e14596d4ea223b5c21c1a3ae381b3d505fdd93c89d9bf755dee2013bde3c2a7662f412df561e50790b9dcaf643893bb4ef596ff4da463cce8166a024a20ff5a78037a987ae74a0941f65bdde89390bfff1e7bb066de8e13702a46c5464ff60e2e3d709b26f0255c0f406b820887c6c8881f5caa9656907fffc4e09ac16f79976f6fcd71c7896e37b0966b8cd7a8436654d1a32f63392fc14f60de367d9b6bdfd2e2c519dc264e22b8cb81d7537f307eedba296906adcd2adbe314fd233a042c45b407e11ca345311c5bc632e38fb8bf7d00d3537635acf4011ec8a76981d7ef86970d635394282e5926120a174ea443d7b3a0856884227dac0937eb5fc668c07a9c411502d6f60addc9b56c7f02137b4a577f3939782c96ece9ec4b0cd02237000bc0bc2f11518c7ec3f058e57965d199e3e739a798040236cf631fa8db4f18afa532f856e7f9d9dba477b801ae62dc49d0ab642ad6c80d8cab5b0f24fd31f3dc8e2816cbd39b80046afeeac19c9c692fb6ab0a9e120f8f08ca3668b54de421820ac3ecaf0c5f17868d8bdc937e197758523cbd6bdd721914a6195bf0e1f763e4989ec97291f825e412504f3091882f88d7839b70ca3a297a5a0c6c92f4f0d8b70c1f57b8dc6c637a7b06b53e31852c3792522d3bffe6fcc7b46e7d9caec7f7f9514c598a77619c4079fa26a048b005d17f45582ad02cea2eac5f939ced7bd28bc6b6d6c2a48a0d95e59f96ebcdb83b3ce03329b3022bca756e66bdff96f278f982dc5898cb20472883b063a582733d0f215d9aa81e05acd07968ec642360633b26dadd9a3f1131053448d6fb87a34740411d4504f26068d1bd7afe480ada60e0a34dea164e9c9a29a6e64e80d8d247e1b5baa1f07b58e96e348eacde9434029870d4a07c7319a048d5699a9159092327190a118102c9373df09fc60d92d8917ac2fab7a4b5e6c41f608401ff8191e6825048f597f0a578403ad7a68f26afb65d0972ba9ba6264969e5dc04f459bd78e803a6b5be594c6c285b15d814a7d8e49bf50429b6aa27a78323414625d0052cd99c70bf82aa38a10d1eb077b20c1882f8a689117e6902d5a5a073a312cd5c699cb53fbd748fdf65f0aad2b2d0ffe9fdef34c15fdd083338164ba14a4da8466f89dce6528e45cf3165f13b19e57d61f9d41c84a13ec03c6ed2e273803b08774826dbbc3361bcacbd3a3d2fa8ad64482dd38166101bfb0d4e328729fa006b8624b86fdc775242e5898405e1f32ea31fe243a261e9c34207c7ad6e8d64163475cdf67fba7c488085506fabf51275e061b8c86a0150f98adca4dba5a89174607f22622637159e7cb3637f7a6fa8ff21757e74aa7714d92380a9e34f15a9332b9fdf6d080410cc9b252f03a04e9152e88b4f83bbf045b20d70c2f9b437b9462e2f2146d8b27ff728c34c4d9c8f32381d43e9c56865f3418ad02cb36d5de1193a3ba16a8c4209ebb8927d2fa21d069803960365ac0cf899e0f349d1075010f4561c118041620d4fb3f4fafc84b93de915a03fc0c63660c9ffd20fbb5017db62958343692964af815bba5b0b3286006db6eaf31eddb27ee7fbca42a2d9d40b66559f851e16bb291247c572bc9945198102d48fb794b87532828a1e1d3469877591e01f03a14d09f7d8fed841165af18786a7a0f4c15d44ab59b18a94b882e09a2927b1f9e5af164369e3ae6256a3e0ac5ed16fc5b0004d642b06ed1a55c8e081d17967243f5c6790320cfede61ebf43d772e284041a88083e64b7df47d4aefea5c1ba2588dcd71587b34beb3897a354c2ebfa9f431805725edfcd2acc1ae8ec3ca03d64a1e6e0df3e6f320579b13dd17b8e088aaed46dda001f20c630bb70160558c7e171c51cb41d65d2ba4f6df74b8dd3ab816946b28b7775b882e4ddaef1dfe3279dc4185c91b0290ef1e6bc7d9e78b288bf9f23ae3188431600b7ed598cdca1077b84e9b270eb751baed758ca4fb50538eb9df668821458febbe5dd382c1d7726e5cade746baf1b3e01f485e5f04e78bc43b98528bda3437c1cab496860a0ecece8ca104cf015816ebc7b4512044e246fb335ff5cb1140b816358c40b44c227389cfa227628049b49af2fc58e79391b3bd1996192fa99809ba5d6bc60238a33514a7fabdf1010936ab19e98fb0c05c04e41c69eec70c252010646c2afea5bb4121c02b472ec3e9416c4d1c7aadb049488880c12337217490e66f7d3446f8a7885d80befe1378d53105bca19d09e9eb95102a176213c8b2a946dfdca025a2e80e7180c91462417ab3a924ad80030c61e807d23234c753eb2f544c6c4cd114132c93083bfc26abbb01610218857d9c63cd8623b5372518020132c24d86810b1761e3c02becb64c16407c70779bcc9862173324930eb1369d016f402713c0f4983af4eda047d3e7949f42f440c5044ce501ddac3f2ffcbacb9ab9c5abcfc785e4676511fe790802e6c364af7aa5d1c720a23b2e882769e51a67c1df6c83ce7973b0c75e669010f8a8704ac0a85d5d98d05439e5f54f695ab293cb63acda29d9e80dfec9bb702220efd38267185cc74d771b16d1c068ab49dac66bc2060cfc7f29b06cc7dd28c3693e737f485b6171be26dfc89f393f81f9b4433572f7918755f59dfd9df788ba9efd715cc05a11fc446291f2b311203a404e4d607ac32c43dd10383216403028be470b86ef5049549a04abd7805f19ac389db7646cc929e5d328e1e4927580790b652da629a1b24f6e35df88883b44942da7ae6eca5b66a9badaebf374ba5c29c3d78c1fdb18010b4c2d1424e72893605818f49ac1d9e992ce6d5cba1c47663ea40c86883f4240cb17e96321447876aa5d92c281c282fd77b9398f0ed905dee26ba90a770a2dbb98a5f537ec5fa0f27a45306a4b0f573e575c57aed0eafab440c161ae6b8fb4dd2f0c20e3415ebf869172e8f6090eb7cc98e9c100eab90932f8f4fe65b9681aed908e32d6da02d0fcd25b72f8c0db0e6d9a24f34b77c35d3a308b306f6d1f02b851d35ad9aa577cbe94efbf1dd5c8eb48c7b79584521dfa3fe41391aa8a7ce560dc9d1598b8f3497761ad4f3d7b0423a7420c12522c968e62927169937415f9c313d178391bfc0499493ba4bc0d82d9d765376cb750419c9d960ee140c31c4a5e630b92e2ce25b981a014f33bc88c17e9151e78b01c60e34f3f1b697a06a3475785f69be3707f537c8e30b53f48c5c5d34bd289cd334d213ec2c0ae1f43095e4f95e9c06cb391e7c7157f6d184aae2dfeb020e0fa259c9784da0ed4736e9bc45b7b3c6e355b101ae77f0c6c2b64074f8c53036395f53fd7c79978465da583b49993c99c0c2f62d07328135cb03525fbd957043efa353092e1f57adbbdb969385bf67a793d216d02b684f32f0bc309f92c9239d159a365d7aeef74b33174ee15b2964ed2ac662286a589bed9fd6c9079e1eff64d8250961c0ce0a010be75c665a56568dbeae165d6005c56b49f166ba78129097f75d70384bf2846acf17c57a4d61bc7c95f6a7161c6ddd44c41cb86389e3b7333c5090e65e23ff7207a2b28d57c7329ba50406b8a8f87ccd2cdd6cfcd3d3aaee87085f5ffcc77f36e5b68fa88153181b202556e81c55c6a6f1cd99e6ff7fa70c5b3e16dfe118aecfb8ce352af293add3505e14e2ff7dcf3036f3548755729d89918519286499b7b82e46ab6481aa43c6694da7db672152c3ac81038712c42cd589ad53531b2eec11dc3ca62d1848f5c4c2b59e6331d3725e526bd10a78fb84e295a181c214377f6a18a8b87d71838b32d12b852ec6921c87acc403cbabe9c574fbd657f558faa88249355777e1a6012dd17853182ee685398e19984240fda68b443ae3ea0169b8cb611be1913f95483e329cd53b2199ed75472ca67906c8db15c1b6d64a155ea7f7ed6bea0e7152b511bfcb84285d79f8f249b7e5ed01788957be6f6cece1d00e16046e3d092e11eb2e7f47c8a8f39081caf6bee32c1ed4c9e490253e20c27c43dbb222913fcc3039d5383e9aaffae267e28c4190b4bc447b39d5176c49d5f13366d0a127caffb5db5cc1987a51f048a40badbba209993ed3e09a9d1fbac7942c33b7dc16e781716132a0c3cccfc57325be95861e8519", 0x1000}], 0x9, &(0x7f0000003780)=[{0x28, 0x6, 0x80000001, "c22cc1673747a22f3905fd4120581db143a1b9c4912528"}, {0x108, 0x10c, 0xdea94370, "035e27d92f74859b94150d51eaf1d1258282378594411425ac1e02a8a4395d5b0b0f52509ba88892ba735a63335dd868fa502919e5208d960d01a36bb505db24df41a3b04c46ceb673892c71b68e37c82d45f6677a04daa61e3f4358054706d5ccccf2a63c58076a28b51bbfa8e28cf07f139a77fa51e2bc39308ddb505edb383c5b8d9fc107f86a861a2284647525c925f8d2fa546f843fcee77ceedf213edccf154152be60443c9efb9eaaa3636420f877186f7f8ac13c63235db25af405f0863b108e3a1d0151c21667287dbd71b7a2ade87343dd8dcbb11019c7eea7627bfd7f948001f7ace9c37d895fb653ec516f07"}, {0x38, 0x10d, 0x7fff, "1239009023fa21c303658c121290bc0c348a461f8d14ea0cb02cc9ad5e0216ada77088"}, {0xa0, 0x88, 0x40, "3adbdf1e2047d1bbb45140102cf6e69504895e97c0e246a091e49061b8eb69dfb1db3319373b4b32957c262e54302e9e87078be15c2c7ca1091d72e95f3ceae34a81eabfce36ab729e73e8fc684b64fdda7f612ca1ad87ec427d893640f969f01215b18351b93497af73e279f86cd8962341aaf18371cbed9e26692cd06005469e90aac9b0e65068c3ce"}], 0x208}}, {{&(0x7f00000039c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x1, 0x4, {0xa, 0x4e20, 0x101, @local}}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003a40)="65cac2e763d799039a90dc87850ea1e8b4793cb3ee7c1221782fdb244b2fd5f129ba52f196016728af09041b89d11176193c5770cdca6579d6bda80627ed7c7f5038b66a0c92c03aa642280e788eed7967f7498025207dd36395c8512046820f87364a6c94d6efec1ed035f7790b6caddc7000198e5cccadc6a43ce0fae7064d966096463f279b522d9f57a45521", 0x8e}, {&(0x7f0000003b00)="ddfbde530aed49fb1bbc64d47607b4e549997e53954913582b6e859a2ba46d8656c610245817fed6d89d209c9dd46ef01bd4980c834d3ef7513dca413d110acf1a918cf0f05bf7219c0a56bc36afeaf01fd489f1ca806e34dbc48e4a53317f43f4b947480f34f334affcbc486698f4e7dea154e97f33e617ad4299941d7fd894b1f64329961604048a77b315828a575c2fc6a56cce4758936edb0407f9956364c78d824c7035d42cd0e31d1c91ba795ced60471572840c4882a4097a336e13dca044dd7804", 0xc5}, {&(0x7f0000003c00)="6714aee2b8093c4e49b2a24beede4558d464c617d33fa10a0d56dbe3b6f194e9a2d45510e76bd6ad748216a6a67af67d422ac590ae377059eb4325ca6832e1bba7e00219940f4bba956dc374fc9f5e9ced4b98a009d12ab1ab47fb72dcd9eb6f060ce69bcdcf31e4a23d185a41aa97acf0b8f7a3a496e642f5beb0a8737cca60a04d21cf6d35c105f8fee9fe43", 0x8d}, {&(0x7f0000003cc0)="8e53d3ab1d987879d86f72cf7358476e498ca97bcc185c7e097b660e350a3c77f8d29c4fb4a0e7717a685b8d951f71c5b70c2ab0b56c7b8868292f5574895b6915446e9b8fc1a6dadc212f100089608aa07b17c7f8f99a4ab28469035781a33331de924167", 0x65}, {&(0x7f0000003d40)="0d63beed8cb8315b252cd45515c2d4dd9e87a8b412080ff169ee99bd83a1bdb68afda01f5d0f567433f9b0f6edc5695c5cfeecdc4adfa09dedbe5d2721", 0x3d}, {&(0x7f0000003d80)="04e450e00b2051b4264952b30c2e87a90f564f", 0x13}], 0x6, &(0x7f0000003e40)=[{0x78, 0x11f, 0x8, "3e6bdf23195860fc18dcd162c9f8bca5fe85f1077aaba1e4bccb7527ee713ce8d1b2deaaf22c47d93cfed843c5a96ab844a2420e07fb9f01d751f3eb8c76a522f2274ab2d27dc11357c2071886b173ddce27d4203a9eb3451a9fbf2533e01415196e3a23"}, {0x1010, 0x109, 0xffff7291, "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"}, {0x40, 0x88, 0x7, "c93cad8a36b0c0557861f78bded7f686443cb8fb83e6c2ee6e904fea927ba9abcd5f5fefd5ff331c8784"}, {0x108, 0x6, 0xb4, "e15bdf5d2b8a998078ca7d52adbf32c68c05d9fee1bd57b57ce826c5575d6cbae8309fb445bea713fb7f86f8b0b817c393d84ad8a5c9454938f82376b631aac820d70d944dda0fb72d76339153df2532bf58d25ecf1fc8f6e65516b0f7df06447f17fde4db7e0ed61eb41539c1b8fe97370c18efa3432b173966f792702f93952b5676914323ddefcea35a9de76a4a36817fcda4ff5de7059cc7c43f30344115fe6622ea3f69174a695fbc3e224e1b6ecfb68cdfc159de7856e62189e2d0c2da8e577f3e888e96344f97b38f53443feee63bedd151bc160ca398662b2505be18fe2a71598e90f6717409ebbcbed0ce3e52296228"}], 0x11d0}}], 0x2, 0x4080)

14:09:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x927ee260c221df9a}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x174, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb18}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x49284a8a}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @private0}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ee}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbd5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}]}]}, 0x174}}, 0x80)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xfffffeae}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000280)=ANY=[@ANYBLOB="46040000827406b2babb06b26330aa75f63e2905bfdf8044b4da6812009c6012e98719372cbfeae4c6bf4606c8ad", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x40000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x700008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  766.307209][T10497] FAT-fs (loop4): Directory bread(block 21253) failed
14:09:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000540240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:02 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
write$qrtrtun(r0, &(0x7f0000000080)="e2cd861be0ae28e8711953c71ebfe2499aca3409705dafcbb02cd73a46a58a8e071ce8559607e02f49d96ca979ba74d45580031cc35a1f53d0a07ef1580abb12d8ac1c4e1cf79ac1c046560b80c9d16a6e8df9d129cc77decbaf6404ef2a143c7688263c8073b2cab093b6b817279a3fe7e871a1f8249be691a1ee259091900e69d840147ecacf7f33da1bf46904c8b41c51ec9de3b39a504c3e", 0x9a)
sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x1, 0x0, 0x0)

14:09:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xaece, 0x541000)

14:09:02 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x83b113bf2e1b2233, 0x108)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x37)

[  766.558345][T10523] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  766.615084][T10523] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  766.683983][T10534] loop4: detected capacity change from 0 to 6
14:09:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x800000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  766.741282][T10534] FAT-fs (loop4): Directory bread(block 21506) failed
[  766.780174][T10534] FAT-fs (loop4): Directory bread(block 21507) failed
14:09:02 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x786c3)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x42400)

[  766.816248][T10534] FAT-fs (loop4): Directory bread(block 21508) failed
[  766.834154][T10534] FAT-fs (loop4): Directory bread(block 21509) failed
14:09:02 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="0333213916eb2e276d767abbaed0d5d064b424dbdaf350d286846028defd5381f0b7b34aa168295d9578189ba6234424ce628ad3c11d58a6202bd3c352f9d0b1d94c127fad172d27e24fd4b87227c2b66dda4de14bff9639f8b83b4e01b547518da538bc09fd7c00"/113, 0x71)

14:09:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x400448c9, 0x541000)

14:09:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028000a40240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  766.953929][T10553] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  767.001867][T10553] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:03 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x189f02)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r2=>r0, 0x7, 0xfffffffffffff001, 0xffffffff7fffffff})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x2c664000)

[  767.178880][T10574] loop4: detected capacity change from 0 to 6
[  767.257345][T10574] FAT-fs (loop4): Directory bread(block 41986) failed
[  767.323071][T10574] FAT-fs (loop4): Directory bread(block 41987) failed
[  767.359825][T10574] FAT-fs (loop4): Directory bread(block 41988) failed
[  767.366641][T10574] FAT-fs (loop4): Directory bread(block 41989) failed
14:09:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x800008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:03 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/203, 0xcb}, {&(0x7f00000003c0)=""/185, 0xb9}], 0x4, 0x800, 0x1)
write$qrtrtun(r0, &(0x7f0000000040)="197a2139", 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/i8042', 0x149000, 0x129)
pidfd_getfd(r2, r3, 0x0)

14:09:03 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x6ee301)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280feff0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x400448dd, 0x541000)

[  767.558537][T10590] qrtr: Invalid version 25
[  767.586786][T10588] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  767.612604][T10594] loop4: detected capacity change from 0 to 6
[  767.620383][T10596] qrtr: Invalid version 25
14:09:03 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x8080)

14:09:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000670397000024008b0d000040000000000000", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff0000000008000e000000000008000d00060000000b000100636c736163740000"], 0x40}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x634, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x800, 0x6, 0x5, 0x5}, {0x7, 0x0, 0x2, 0x6}, {0xb09d, 0x0, 0x81, 0x4}, {0xff00, 0x3, 0x6, 0xffffffff}, {0x4, 0x7, 0x2, 0x1}, {0x1, 0x77, 0x5a, 0x7fffffff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa46e}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8000, 0x3, 0x58, 0x3dc}, {0x8, 0x71, 0x1, 0x40}, {0x9, 0x3f, 0x6, 0xfffff278}, {0x2, 0x0, 0x40, 0x100}, {0x9, 0x7, 0x5, 0xfff}, {0x5, 0x20, 0x0, 0x5}, {0x0, 0x4, 0x3f, 0x2af}, {0x0, 0x6, 0x2, 0x8001}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x634}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB="586f77e6b71f77ee70cb88f3275777bff70a6a0454a5a9c630dd2f62", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  767.636845][T10588] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  767.727477][T10594] FAT-fs (loop4): Directory bread(block 65536) failed
14:09:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x400454ca, 0x541000)

[  767.777913][T10594] FAT-fs (loop4): Directory bread(block 65537) failed
14:09:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x900000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:03 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x83)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
read$qrtrtun(r0, &(0x7f0000000080)=""/4096, 0x1000)

[  767.837174][T10594] FAT-fs (loop4): Directory bread(block 65538) failed
[  767.882292][T10594] FAT-fs (loop4): Directory bread(block 65539) failed
14:09:03 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {0x10, 0x8}, {0x8, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000380)=[0x6, 0x7], &(0x7f00000003c0)=[0x8, 0x200], &(0x7f0000000480)=[0x0], &(0x7f0000000440)=[0xa97c, 0x9]})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x240000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3ff, r1, &(0x7f0000000080)="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", 0xfe, 0x4, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f00000001c0)="63bd3d11b9599cea9a607631643c65c07ae095a167eb65b62dedf7fe3d9de6ccb990fa6f8dd827b5c75a", 0x2a, 0x2, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xac7, r4, &(0x7f0000000280)="3357cab3e4ced1cdd4671bc16b7ad4cb3918b8ad67f95d8b77ae53c55b120ebee981270f2e656ae1962e1fc3fa5d1c189c610ea2d3804cbdea7d5a055383bafd127499ae0e3bbd6a5c95f22a3e54a432d39c402ea0aa313771765c0d74bca887539d31", 0x63, 0x0, 0x0, 0x3, r5}])

14:09:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001040040000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  767.977012][T10625] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:04 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x2)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1, 0x6, 0x9)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
poll(&(0x7f0000000300)=[{r1, 0x100}], 0x1, 0x2)
getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x400202, 0x0)
write$qrtrtun(r2, &(0x7f0000000080)="0c2e7652a7f32662ccb26497da6b74acabeac619b9ff40ca216df058b5171343259cf711b666bf5b1d5b1a0d1941a7c66e7df7983a0ac27c8b871eaf6697bb6a40cac36622992e3b72c76e9a2e05d79c0cf043cfc37d62ef572ea0708cbb537ace701955468060c5aa4d5f21d067e4731478d23d914f1b28883274db9d394944807e063a481f805c2515e8d001fa26a07fda1a46b67c4ab1dbd46be14425516801d8e4e9ed08a7dcfb320d5491a81db92c3ea9825e53952dd9107d2857dc9a2a6238ae580b6b3e6e63f8a743ab13268f9b9c772441559c6c5fd89cee82da842c07b4bca8a73b7d27094453f3b3ff0d0917d2", 0xf2)

14:09:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x40049409, 0x541000)

14:09:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xa00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  768.194034][T10645] loop4: detected capacity change from 0 to 6
14:09:04 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="d3a99cbf5051af5632748b8982", 0xd)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x18000, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000140))
write$qrtrtun(r1, &(0x7f00000000c0)='\x00X\x00\x00', 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x10380)

[  768.255436][T10645] FAT-fs (loop4): bogus number of FAT structure
[  768.302224][T10645] FAT-fs (loop4): Can't find a valid FAT filesystem
[  768.400809][T10645] loop4: detected capacity change from 0 to 6
14:09:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x541000)

[  768.447329][T10645] FAT-fs (loop4): bogus number of FAT structure
[  768.464181][T10660] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  768.483310][T10645] FAT-fs (loop4): Can't find a valid FAT filesystem
14:09:04 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r3=>0x0, ""/256, 0x0, <r4=>0x0})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x805, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r7=>0x0, ""/256, 0x0, <r8=>0x0})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(r9, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000fb7bde0b000000004920ccfcfa1ba44e240000050a05080000000000000000020000071400000011000100c32000000000000000dad4d07106"], 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r8, @ANYRES32, @ANYRES64, @ANYRESHEX=r6], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f840)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r8}], 0x9, "734638ea78bbbd"})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fadvise64(r1, 0x14, 0x3, 0x1)

14:09:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001a40040000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xa00008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4004ae99, 0x541000)

[  768.898231][T10695] loop4: detected capacity change from 0 to 6
[  768.934791][T10696] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  768.966949][T10695] FAT-fs (loop4): bogus number of FAT structure
[  769.013802][T10695] FAT-fs (loop4): Can't find a valid FAT filesystem
14:09:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x40086602, 0x541000)

[  769.088146][T10695] loop4: detected capacity change from 0 to 6
[  769.118060][T10695] FAT-fs (loop4): bogus number of FAT structure
14:09:05 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r3=>0x0, ""/256, 0x0, <r4=>0x0})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x805, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r7=>0x0, ""/256, 0x0, <r8=>0x0})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(r9, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000fb7bde0b000000004920ccfcfa1ba44e240000050a05080000000000000000020000071400000011000100c32000000000000000dad4d07106"], 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r8, @ANYRES32, @ANYRES64, @ANYRESHEX=r6], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f840)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r8}], 0x9, "734638ea78bbbd"})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fadvise64(r1, 0x14, 0x3, 0x1)

[  769.156989][T10695] FAT-fs (loop4): Can't find a valid FAT filesystem
14:09:05 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x43a423)
write$qrtrtun(r0, &(0x7f0000000080)="00202939b8aaa6204ce314df50e3f22c8d17879b240e81617e7315826faabd194633bf0f6dcc0bc01291f4fc7e557d29e97e5119ce7bd8cf923516787693944a97668e00c77337235f5211", 0x4b)
write$qrtrtun(r0, &(0x7f0000000040)="f44ddf08", 0x4)

14:09:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xb00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001020240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x401070cd, 0x541000)

14:09:05 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x208000)
write$qrtrtun(r0, &(0x7f0000000080)="032110395c5fb9ca0591f685a85e1cfc50bd16005ae9eb79d0af25b0a0d3506c77afa4bf16c2b80e39e2b6824271611fea31a7958514369fc5284e110aa2cbcc428e74fd0ec9b4c9d650f396ba54063498367161d01843acff931f6076b2e9a369b3978a04b2e838a620aa9da7ed586811b86dc7f0c60a0a8d29ec86b690ebb12162372714d57f9e8cf3d1781e2224a107baa033e46309b81de2c86053cf0ff57123259c36101454", 0xa8)

[  769.490329][T10742] kvm_mmu_after_set_cpuid: 3 callbacks suppressed
[  769.490345][T10742] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  769.506677][T10751] loop4: detected capacity change from 0 to 6
[  769.584647][T10751] FAT-fs (loop4): Directory bread(block 515) failed
[  769.672283][T10751] FAT-fs (loop4): Directory bread(block 516) failed
14:09:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}]}]}, 0x28}}, 0x0)
[  769.722246][T10751] FAT-fs (loop4): Directory bread(block 517) failed
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000001b80)={0xad0, r2, 0x1d, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_TX_RATES={0x30c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x36, 0x36, 0x6, 0x4, 0x0, 0x16, 0x9, 0x2]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x1, 0x6}, {0x2}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0x9}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x2, 0x9}, {0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x6}, {0x2, 0x2}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x0, 0x3}, {0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x8}, {}, {0x6, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0x5}, {0x1, 0x2}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xc806, 0x4, 0x6, 0x8001, 0x0, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x9}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x6}, {0x7, 0x3}, {0x1}, {0x0, 0x5}, {0x2}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x3}, {0x4}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x4}, {0x3, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x4}, {0x4, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x7}, {0x5, 0x6}, {0x2, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x3}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x6, 0x4}, {0x1, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x0, 0x3, 0x30, 0xc]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0xa}, {0x7, 0xa}, {0x7, 0x1}, {0x2, 0x9}, {0x6}, {0x2, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x6, 0x8}, {0x1, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb510, 0x2, 0x8, 0x1, 0xfff9, 0x381, 0x8, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x4, 0x7, 0x5, 0xf23, 0x400, 0x3]}}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x4}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x1}, {0x6, 0x9}, {0x2, 0xa}, {0x0, 0x2}, {0x2}, {}, {0x6, 0x8}, {0x1}, {0x1, 0xa}, {0x6, 0x4}, {0x4, 0xa}, {}, {0x2, 0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x6, 0x7}, {0x5, 0x5}, {0x5, 0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x2, 0x3}, {0x3, 0x6}, {0x3}, {0x5, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x8}, {0x3}, {0x5, 0x2}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x6}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0x9}, {0x7, 0x5}, {0x5, 0x1}, {0x7, 0xa}, {0x1, 0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x7}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x6, 0x3}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x1, 0x48, 0x5, 0x30, 0x3, 0x36, 0x1b, 0x9, 0x12, 0x30, 0x60, 0x36, 0x36, 0x5, 0x0, 0xb, 0x4, 0xb, 0x6, 0x6c, 0x16, 0x36, 0x5, 0x48, 0x3, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x24, 0x32, 0x4, 0x18, 0x24, 0x9, 0x2, 0x16, 0x6c, 0x48, 0x16, 0x2]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x4}, {}, {0x2, 0x5}, {0x5, 0x4}, {0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x2, 0x2, 0xa800, 0x58, 0x4, 0xf000]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x2e7a, 0x0, 0x3, 0x0, 0x7, 0x6]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x9}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x6, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x5}, {0x6, 0x8}, {0x4}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x9}, {0x4}, {0x5, 0x6}, {0x2, 0x6}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x14}, {0x0, 0x5}, {0x7, 0x9}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x6}, {0x4, 0x4}, {0x6, 0x9}, {0x1, 0x3}, {}, {0x4}, {0x0, 0x1}, {0x6, 0xa}, {0x7, 0x7}, {0x2}, {0x7}, {0x4, 0x13}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x5}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x2, 0x36, 0x36, 0xc, 0x12, 0x24, 0x3, 0x9, 0x6, 0x3, 0x16, 0x1, 0x60, 0x9, 0x30, 0x5c, 0x5, 0x0, 0x3, 0x6, 0x24, 0x1, 0x16, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0xa}, {0x6, 0x8}, {0x5, 0x2}, {0x1}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x9}, {0x6, 0x6}, {0x0, 0x5}, {0x3}, {0x0, 0x9}, {0x4, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x2, 0x4}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x7, 0x5}, {0x3, 0xa}, {0x2, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0x6}, {0x1}, {0x7, 0xa}, {0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x6}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x5, 0x4}, {0x1}, {0x2, 0x7}, {0x5, 0x2}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x3, 0x9719, 0x8, 0x97, 0x3f, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x1, 0x6c, 0x3, 0x1, 0x30, 0x9, 0x9, 0x2, 0x1b, 0x6, 0x3, 0x4, 0x9, 0x16, 0x16, 0x60, 0xc, 0x0, 0x3, 0x1a, 0x6c, 0x16, 0x1, 0x4, 0x47, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x9, 0x100, 0x0, 0xfff8, 0x33, 0x4a1, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd4, 0x4, 0x400, 0xffc0, 0x8, 0x48d7, 0x5, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x18, 0xb, 0x60, 0xc, 0x36, 0x60, 0x0, 0x12, 0x4e, 0x6, 0x5a, 0x9, 0x6c, 0x24, 0x4, 0x60, 0x9, 0x48, 0xc, 0x18, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x36, 0x3, 0x6, 0xc, 0x0, 0x1b, 0x6c, 0x16, 0x1, 0x1, 0x48, 0xb, 0x5, 0x5, 0x6, 0xb, 0x6c, 0x24, 0x9, 0x1e, 0xc, 0x5c, 0x6c, 0xb, 0x30, 0x36, 0x4, 0x1b, 0x9, 0xb, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0xc, 0x6, 0x24, 0x16, 0x5, 0xb, 0x18, 0x0, 0x12, 0xc, 0x4, 0x6c, 0x12, 0xc, 0xc, 0x48, 0x18, 0x5, 0x31]}]}]}, @NL80211_ATTR_TX_RATES={0x3a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x8, 0x5, 0x6, 0x1, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x8}, {0x7, 0x2}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x4, 0x4}, {0x5, 0x1}, {0x3, 0xa}, {}, {0x5, 0x7}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x3}, {0x5, 0x5}, {0x5, 0x5}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x5, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0x2}, {0x7, 0x4}, {0x6}, {0x0, 0x9}, {}, {0x2}, {0x5, 0x8}, {0x3}, {0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x6c, 0x6c, 0xc, 0x60, 0x6c, 0x3, 0xb, 0x5, 0x1b, 0x2, 0xb, 0x9, 0x60, 0x16, 0x1b, 0x2, 0x1, 0x1b, 0x18, 0x9, 0xc, 0x5, 0x4, 0x6c, 0x1, 0xc, 0x5, 0x1b, 0x0, 0xc]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7fff, 0xa2, 0x3ff, 0x9, 0x80, 0x4, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x4}, {0x0, 0x1}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x7, 0xa}, {0x5, 0x1}, {}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x4, 0x7}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x2}, {0x1, 0x4}, {0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x9}, {0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x4}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x7, 0x6}, {0x6, 0x4}, {0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x4, 0x9}, {0x7, 0x4}, {0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x4, 0x4}, {0x6, 0x5}, {0x6, 0x4}, {0x7}, {0x5}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xc523, 0x1, 0x5, 0x5eb, 0xe72b, 0x7, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6ed, 0xb0, 0x800, 0xfffd, 0x1, 0xeb3, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x1, 0x1, 0x6, 0x2, 0x3, 0x1000]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x4, 0x0, 0x2, 0x6c, 0x60, 0x48, 0x12, 0x44dc948ef66e3d84, 0xc, 0x60, 0x30, 0xb, 0x5, 0x4, 0x5, 0x12, 0x1, 0x6, 0xc, 0x36, 0xc, 0x12, 0x3, 0x9, 0x2, 0x3]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x30, 0x4, 0x1b, 0x6, 0x48, 0x18, 0x60, 0x60, 0x36, 0xb, 0x18, 0x48, 0x36, 0xc, 0x30, 0x4, 0x1b, 0x9, 0xb, 0x9, 0x3, 0xc, 0x16, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x0, 0x3d, 0x0, 0x8000, 0xff, 0x1, 0xe5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x12, 0x9, 0x6c, 0x9, 0x16, 0x9, 0x30, 0x16, 0x1b, 0xb, 0x16, 0x60, 0x9, 0x24]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x6, 0x5, 0xb, 0x4, 0x3, 0x0, 0x5, 0x60, 0x36, 0x37, 0x5, 0x3]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x3}, {0x0, 0x9}, {0x6, 0x6}, {0x5, 0x8}, {0x3}, {0x0, 0x7}, {0x2}, {0x1, 0x6}, {0x3, 0xa}, {0x4, 0x5}, {0x6, 0x3}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x3}, {0x3}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0x4}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x5}, {0x3, 0x7}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {}, {0x0, 0x6}, {0x2, 0x9}, {0x6, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x8}, {0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x4, 0x2}, {0x7}, {0x6, 0x6}, {0x7, 0x7}, {0x5, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x5, 0xa}, {0x3, 0x1}, {0x4, 0x9}, {0x7, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x40, 0x400, 0x0, 0x8, 0x7, 0x80, 0x2]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x30, 0xd73f72e22bbd65da, 0x60, 0xb, 0x48, 0x48, 0x1, 0x36, 0x48, 0x6c, 0x60, 0x6c, 0xc, 0xc, 0x36, 0x24, 0x36, 0x72b382c614a14652]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x4, 0x6c, 0xb, 0x60, 0x18, 0x6, 0x48, 0x6c, 0x2, 0x48, 0x6f, 0x5, 0x24, 0x18, 0x24, 0x24, 0x3, 0xb, 0x1b, 0x60, 0x24, 0xc, 0x18, 0x36]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x6, 0xc, 0xb, 0x2, 0x5, 0x63, 0x30, 0x6c, 0x18, 0x24]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x6}, {0x6, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x7, 0xa}, {0x6, 0x2}, {0x3, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x6}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x2}, {0x5, 0xa}, {0x4, 0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x2}]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x2}, {0x4, 0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x7, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x2, 0x3}, {0x4, 0x7}, {0x4}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0x3}, {0x3, 0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x4, 0x3}, {0x1, 0x5}, {0x3}, {0x2, 0x5}, {0x5, 0x3}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0x6}, {}, {0x7, 0x1}, {}, {0x7, 0x9}, {0x2, 0x8}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x5}, {0x3, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x7}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x5}, {0x7, 0x1}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x2}, {0x1, 0x4}, {0x2, 0x6}, {0x3, 0xa}, {0x5, 0xa}, {0x2, 0x4}, {0x4, 0x19}, {0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x6}, {0x4, 0xa}, {0x7, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0x0, 0x3}, {0x3}, {0x6, 0x7}, {0x5, 0x4}, {0x6, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x2, 0x4}, {0x6, 0x9}, {0x7}, {0x2, 0x7}, {0x2, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x3}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x16, 0x5, 0x60, 0x30, 0x12, 0x45, 0x1, 0x36, 0x1, 0x1b, 0x9, 0x3, 0x6c, 0x1, 0x60, 0x36, 0x5, 0x36, 0x4, 0x3d, 0x24, 0x12, 0x3, 0x5, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x1b, 0x5, 0x36, 0xb, 0xb]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x3}, {0x7, 0x7}, {0x3, 0x3}, {0x3, 0x8}, {0x0, 0x6}, {0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x7, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x6}, {0x0, 0x3}, {0x3, 0x4}, {0x3, 0x7}, {0x3, 0xa}, {0x0, 0x3}, {0x5, 0x3}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0xa}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x5}, {0x2, 0x4}, {0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0x2}, {0x3}, {0x6, 0xa}, {0x7, 0x6}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x4}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x9}, {0x3, 0x6}, {0x4, 0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x1}, {0x6, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x2, 0x7}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x7, 0x6}, {0x3}, {0x6, 0x1}, {0x1, 0x7}, {0x7}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x8}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0x2}, {0x7, 0x7}, {0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x3, 0x60, 0xb, 0x30, 0x4, 0x76, 0xc, 0x4, 0xc, 0x2, 0x3a, 0x6, 0x12, 0x4, 0x9, 0x4, 0x14, 0x1, 0x30, 0x1, 0x1b, 0x36, 0x5, 0x16, 0x6, 0x1b]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x1}, {0x6}, {0x7, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x1}, {0x5, 0x5}, {0x2, 0xa}, {0x7, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x3}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x6}, {0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x4}, {0x4, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x0, 0x4}, {0x3}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x3}, {0x7, 0x7}, {0x6, 0x4}, {0x6, 0x1}, {0x3, 0x3}, {0x1}, {0x6}, {0x2, 0x9}, {0x5, 0x7}, {0x7, 0xa}, {0x6}, {0x7, 0x4}, {0x6, 0x6}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4b, 0x6c, 0x2, 0x30, 0x6c, 0x12, 0x7, 0x64, 0x30, 0x30, 0x60, 0x36, 0x60, 0x3, 0x5, 0x24, 0x1b, 0x36, 0x5, 0x12, 0x12, 0x36, 0x16, 0x30, 0xc, 0xb, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb1d0, 0x1, 0x3f, 0x7ff, 0x7ff, 0x40, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x30, 0x18, 0x24, 0x2, 0x48, 0x4, 0x6, 0x5, 0x1, 0x36, 0x6c, 0x2, 0x1, 0x12, 0x60, 0x1b, 0x60, 0x24, 0x1, 0x4, 0x6c, 0x13, 0x16, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x79aa, 0x6, 0x80, 0xd8b9, 0x8, 0x8, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x8, 0x9, 0x8, 0x0, 0x9, 0x80]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8094, 0x40, 0x1, 0xff, 0xfffa, 0x7, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x6, 0x16, 0xb, 0x3, 0x5, 0x30, 0xc, 0x16, 0xb, 0x25742638ec64a577, 0xc, 0x0, 0x5, 0x3, 0x0, 0x6c, 0x24, 0x1b, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0x5}, {0x6}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x1}, {0x6}, {0x2, 0x5}, {0x1}, {0x2, 0x1}, {0x7}, {0x4, 0x9}, {0x5, 0x4}, {0x5, 0x6}, {0x1, 0x3}, {0x3, 0x16}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x6}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x2, 0x3}, {0x4, 0x3}, {}, {}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0x6}, {0x7, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x5}, {0x2}, {0x3, 0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x9}, {0x7, 0x2}, {0x3, 0x5}, {}, {0x6, 0x8}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0xa}, {0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x5}, {0x6}, {0x0, 0x7}, {0x5, 0x2}, {0x5}, {0x4}, {0x3, 0x7}, {0x7, 0x5}, {0x3, 0x1}, {0x6, 0x5}, {0x7, 0x4}, {0x7, 0xa}]}]}, @NL80211_BAND_60GHZ={0x114, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x800, 0xff, 0x85, 0x4, 0x4ba3]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x9}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x7}, {0x7, 0x5}, {0x3, 0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x2}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x63, 0x5, 0x48, 0x36, 0x48, 0x1, 0x1b, 0xb, 0x24, 0x16]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x7}, {0x7, 0xa}, {0x4, 0x1}, {0x2, 0x5}, {0x1, 0x9}, {0x3, 0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x5, 0x9}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x2}, {0x5, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x5}, {0x3}, {0x1, 0xa}, {0x2, 0x8}, {0x2, 0x8}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x6}, {0x3}, {0x7, 0x2}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x16, 0x9, 0x5, 0x3, 0x18, 0x9, 0xc, 0x48, 0x12, 0x5, 0x36, 0x1b, 0x30, 0x16, 0x6c, 0x3, 0x9, 0xb, 0x1b, 0x9, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0xff, 0x8000, 0xf2, 0x1, 0x6, 0xfff]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x1}, {0x5, 0x2}, {0x6, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x1}, {0x4, 0x1c}, {0x7, 0x3}, {0x5, 0x4}, {0x7, 0x3}, {0x0, 0x7}, {0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x19}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x2}, {0x2, 0x7}, {0x1, 0x1}, {0x6, 0x9}, {0x7, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x2}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x8}, {0x2}, {0x2, 0x5}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x4}, {0x3, 0xa}, {0x2, 0x4}, {0x4, 0x5}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0x2}, {0x7, 0x7}, {0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x6}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}]}, 0xad0}, 0x1, 0x0, 0x0, 0x8040}, 0x1)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:05 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r3=>0x0, ""/256, 0x0, <r4=>0x0})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x805, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r7=>0x0, ""/256, 0x0, <r8=>0x0})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NFT_BATCH(r9, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000fb7bde0b000000004920ccfcfa1ba44e240000050a05080000000000000000020000071400000011000100c32000000000000000dad4d07106"], 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004044)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r8, @ANYRES32, @ANYRES64, @ANYRESHEX=r6], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f840)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r8}], 0x9, "734638ea78bbbd"})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fadvise64(r1, 0x14, 0x3, 0x1)

[  769.773870][T10751] FAT-fs (loop4): Directory bread(block 518) failed
14:09:05 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x144680)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0)
write$qrtrtun(r0, &(0x7f00000000c0)="02fcfe3300fb", 0x400047)

14:09:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x40186366, 0x541000)

14:09:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xc00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001030240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  770.017145][T10785] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:06 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
io_setup(0x3f, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])
r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000002400)={[0x6]}, 0x8, 0x80000)
io_submit(r3, 0x6, &(0x7f0000002480)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x7, 0x20, 0xffffffffffffffff, &(0x7f0000000080)="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", 0x1000, 0x4, 0x0, 0x2}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x3, 0x8001, r4, &(0x7f00000010c0)="77b0d14029c278c802e91e524f09892ebed3908ad2865c57dd89ced554e6d384e461471935a0b69f8b800d53b6341be4a23c675a39b40549d1eca190d34a5b0fe0aa8f81fa74fa054112e06fcbc750a55f3c39065097b1c33cfbaeed53bcf57eed0b39a79040229d18347ee74cb840a80a32a8a5e76006c92473c9157e0dab285eca884ea2606843b93fa0f048f927554236b68ca1148e1671d9f03240f51851139ac3b568ddf050cddce7478ade82623e5079c186b7939f", 0xb8, 0x1, 0x0, 0x1}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x5, 0x5, r5, &(0x7f00000011c0)="dabe4b64cca2cfc0396569c2621eb25e62c99c2df97821939df354bfb5ec45ca534ae79f4a76c6dc303ae10547a1f9cb80a32476bb0996765fa1865b6a81ec215b4ca38d8c8dad1a5e3f98e10c0f17e5399c82d8c1d7c74b9416186455eb697982a2b227b3896f2ce7e1a7df1215648371c0b134ee3944c2c45b211b080c093626b7d3ffbd0fb2f94c291ecd9aab0abfc22211291565e0b19b1feb3504b90147841590cc94630fcd8194de055ee437a0600a5ce956", 0xb5, 0x4, 0x0, 0x1}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f00000012c0)="06804cc635018812054b2037809b3f22b706872806d7fe9b8eaf08a6c2adb14acfa3962949c40d68708fa10264", 0x2d, 0x4, 0x0, 0x2, r6}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x1, 0x100, 0xffffffffffffffff, &(0x7f0000001340)="f17194b971910fa7930b1de64bf8ad154ad599016b5cbab33a689c4e9b3ea3c5136b3d76edb857b9c93a9751a88daf261f5c1b1943c5e5515f4d360043866ae0f8aabee26bd52cc5137cec5bdfc9b5edb2c494d78163c0a8bacd3228b953c1225f388c867158e93322d0917f0626f9d5ec7278dec2ab21737b39bf21b5df18c2878d1c03f7dc82edf1c53175304b16cf873ed93700816312781c5524651a584f8deaee0a4434cb8627acadd10fec8afc81f04582658eda602d9bb0bab5e0b5d856694cde81b3c9967db548c4ebd74189da1f16b08701b50fdfa39d1136545f96d5208cb6cfc82617ca35408ece908facb73c062343105c37dd3944d002a29363ad7503a9210835be5b9b21480ebefe7b282944ceadf24cb269a9cead60dae3a7379b7f043853886a356073c99562899d90e4bcd37c388538f20214b3fbebecbfe8e7468b86937d71bce82fb03d60bc5bf3f605867119b21092c49113127cfd1439a71b572fcd809ef31ef005a967cdd14c651bd99aef2ea64a0cc64e0d0ace7c3dbdf12ccf81709f2ceaa0f323294049814092b99fe9f6b7e81c3aa2d5ddf4c57dc68b4a97b7632715287b79ec67b72b7d728f0d7bf14fffb19c5dce17bbf4d9b68dd925f480911238c73899cbbbd8e8e57d2b52e26b6b6e03a0b2db607ae247b0177a1f02b16e3e0d8770931a61a81ffe6677cc271d766c508c77b94c0faf9bef2d4ba4b5908c459931fb7181fbdd6553d3086049af0c36fe1e0b9c161d0543ea8d7f8d2c6f655f7dc65a8c8ba6e2e508359dca228facfa389a97c293be08446ec0c7a9e08d892c60640a1410d34a773be24b9ac0ce0b15fb119efedb034daecc88b0771880c1451cb0abdd0cbf9148e9d3a986b4ea81ba07906d8b444d2ce03d8adc0991f2a8f8e1e25d6edbbc31edd958d735f2b4d3cfed62ebe37a8d0a39f34023fe8eccaf0a34d5781a6b8bcba689119e0cae585f1ef4475134ccad8a176309f90165652572d0431c63f41191e14c2f6b9bd115f40d4cf7e8ed79e47d5f750181232e65595c333515e32676496a858a4e7ba065c3e65a63abd6ae72b0360aed71bb01f2a39e19fe5e87a5d70b308b35afb03290f1b9e14aecb05136d434cea0b2891312468aeb47e3f77458a6df63003d068fe17f44031ad791e1ea3db80594ec6d9348a7772f78296553226bbf8075e40bb93dc46766a4340cb6a437f8ec3f8b6da3f68c67b11d59adbcd97e75d811565d6a64322beeeb5d0bb7ef66c9e469d7e1da3d55b71a7a5903edceebbdc5fa5d5841162a9bfaf696585ac77b1ad41fe45dc96f268fb71c12284436e8fd30f9c6941841dc42cec6e88b96699f054ea469ceda2ef7533de54dfb9b997fd67d7fe293f0940b6f7e9691296ec28ece9f3e5c3a1d41b520f7edea0c17b92dffa007bb200d241d41796ed7eac01b3bc73110d5e633048dd90fd6dc983e669d2ea899faedac50f1553a76cc76439ab0c2bd645aa431c4a3298119e4b76c2a1eb9b1faf295f57f80492a9e224371579f57f7dd1f3fb7fd1f8ccb74aef1f389093b1e7c61138a09b5f703a732757502bd5beccc199a9c46825d986116b50894098bccf49fd41db02d8b86bcba6fcbc21d6803579e82cccfc4aff14977e8b299d46eff8133fa7186378d52b23decc1f5125a7d8da33ee5cb438bff040aa62ca53eb7fd20baa52bd58522a1561bee2b91e5b586e071de15d986f9f27aa3f54a28b289d9f72a1db85be8fee3aa709149c87abc6059887485998cec52db056de5a0b0672777734feff011a383e3d1659921f3213fc3064aedbc2f5116f28843768cc1c4d8cf1d833e92228220600aa946c87d0137a29a5f52d1c2c29956d9c087d47cfdf228002cba25d2f0216a075d9cea8a93bb321d20fa4edcb47f3f8148babbc125e24559c0a57be47af0774a5c63a4bf13288f3762052ea7cef5622fd84c803348909c7d4c2a8dff63a7851268ebdcc8d82b7e7eb2e7633a19d269b32ec771a28069405d2d644b14c7c9c8db58d3ef51da03ebefc64319fd66067b18900f2db593cf62995d7baa33a92f3411c14b639d2af6898e5d9cb83c3640fa04d8c8aa07bdc6dc3ddb43470575e44f865ae4b1f196f2b1d9045a0d1203793cad5d5f348540b6beb2ca8aaf3586e2e834603461ba84860bd43dbe1580c9c0950b159b821f231a05581e8bc9fefe17ff7d1ead16910f69419df8b235e65f676e5ca643c59ffa811a368bf35e4140592a7f488315a21c3b4e631d6e7046cadd0c761e17cae92a9b76532b45178f5523562a4263f582f336b72c8cc53254f350cc0f88c301d268ad237ce4b2f783e245c1d87373fd43f0adeb40ae10ceb7817d8c3c7f920a957ad21d13743268ad64b7f4ad258566c9995e8980152b83d8df3b78bacee2dc2b705765ff79d0f810010e39f18d92cc88a160e8fc36a3fe07cc0b46e9195654ee691f955dac0dc943c2f3fa69cf9be5120a14655e0aab07f7f6bf5b3838f4b920f11826ab4a8b929b64b6b6296f53728f03cd5afc9796cd3a348bed8f61057219b7a541b1001244382120db8437a78038a5038be46df712c3f178baf4c8475f9f6a07945f56539a33c909d7ffa56ebd8200540a8ebb247f4a931c5e9765e8337cc994af9d520e7f13c9adaf7110400aeb28eea2c040e77468a647ac9aa0ce25ba5ac3543b6a1fe7b475545b76555140030a0b4783cfb674ba1c391f825f48f0fa3519ad17fbd4e2bed8eb84e9d9691c9e51acf03e0ec30e1d2da3393c67e0478cabdfb74926900ffec85786d41e73a1f053008fc704a778c706633d113d0ec615183edd3526c4a361af511eaed5f61f2c1ae89e48451047e2162ca72831413d667c4b7193c256bfcec1bf9bb30b28469424dd07ecee6488f9a2e0ce46389c08055e6566b77742c9776a699cafdac5a29d0f41349e4db94e7a781c24b44ce1ae3efe82416727b5fd88a740fe15d87a38f6911ce099ba64659ead06b7355fdaf4fd38be06d4196b5a062d7c51beccc7a2b803d569ec5c688e49d35fb8c40c925f2d052e47c04c0ae67280a5c5cb47b66035239c614ced9f05471be4b001b91bf03b852441d3762df8b51347b8670674eb0c36847dcb856b1aac9ce461a200a352473ac7001b842652644183cd7ba05d623ac2630b440e58e5024e95660e981f450a9d767c747afc2b5b0cc83bb0843b51b7c3037f8b45f57b24df3b8e9d40df8c99ff38fc127aaebdac9a0adaccae980ad6c505cc86be462f9f0a39796995e753b6eb89dc80bde7748a07dbd15bd90525aa6547619c5a754a9583b152b6062fb40cbda59fe0ac17fd116d7286f44f32f4b95264e04b122eacf34702783709929a2a0eb7c72b244c00ca54632f2788d169f7cb92ba9e6ae7a68f911b0bb2c43ee05a5d448669ffa0a0b069afe3f06b8dca05319112b5b85ecdd7eb3a998d12a655cb3cb8fbb79f88d3ce50f3e35670779df1908fb3fcf8f6788cd171df1e4f39f1b5a0e622cfd9057ee45a4b5571e30b8e7b35dc884102f98ff9aced1e6e4ac617bdfd169f7563f60d5a57a90bbc60d9235015e5fa4c2aeeb648942c4b9af9743587d1701b7a6028b3540f632567065d7edd45ef760bd589ccea4fd34742acf524b6b67d4ff217cd45f7f6900e97dd37d8a7b67a50e12836ae7bed45ec0e6a9f1b3de8427c8860fed7f9e7a15f27ac255ccef55bede4f0f3f9133e149bb7358d987104c4f7a3a2d2fc6db3e2b6835f5026be0716a4b68fad45a2aa22aa68c490d7c85d324a32e0345e11f82dcbe67867dcf09b91e3d4234d1b19cd8e6330d21accc98772f8396ab5e77518e94f72084b9ce7e71d51b61c052780d5082843306475d6af9763cc6852fda6082330abe6f2f1f58a09d37f38684f514312106204433894aa7d9cd54be96c0f9e71b86524abfb3b595e638c15693d293e07aac4d85115a87556b8707923a4c98f4c93510fe4816c0b4e3ba1e57ad550387106260a59a4b8a4460afb3128ed0d6e1d4fe89f0f30e71ac1c15e4afcd0938d5d9fa6b72342751e33eecadd5391bb4329f67149bb56de4167cec27ddc23b635753f9f0738be5b06f26e6893aea0941e18e0495040645d76d04bb5ead17106a62d4c4c6bb2061148e397629d04384c7d7b7e846ee93a3d10bfcfa5a82acae2c24ae4d1152c7399953a728feb205f888b5382b362c6d31e2d68be0b6816a92f7891205904a275ab9faf4876021ccf7be40530b0159a5c40686a36ceb30fe18ec114d5f4eac64d4f3a1173d21fd919b80027037cf0cf486925bc32543419c1574a38ffcb0c7a7638f355160215e8388e1c225d1b3c7542a5372853b067f1af763b6f6be38b019922532d1e15a6635e2f9c8ee2e93199d5da952d870df4c02299fb8d8c9aaeb7cc2efeb93725545856283d9819ff7fdb73575a187f19b9949c25e78ec4efe67f43274f5ce22eea3130331a5bdc46fc8515044b7dfd44f15f99f068655b8d3f74f61adac6c262832fc96897b5c429844359bd8b98c4bf984c7f26926a8ae8248926237f8d482fa38024b183227290f671fa69f5831f6283e5339d9d270ab841fa37d7e2240c60de64845c112e1580a92b617cc14365d82347be7a9e8e6df441ec63ba72b39d16021220d9bc8dfa4d5cc7b7e9e11ee6971f3bf2e6476457d596bc98d0dc1ef69c0a1b8ed94199aa0716a9615e55440b32073c680d9745668e7fb14cf13c9bf5bc026598b8996c1b51d57df7232c26ac567df5b5a242adf1e72c692d7f573102d2f660cfc00bb4f2b145aaf2268d61464c8e9281952fe85df2509483e8ae1389f93c5e5e2c717be0d4d367ec4f768afdc7a9c08269a42081e79fa13eba4a55782e6ddf6d080db84dfb9d6f5c11dc9c240d5e54c356c5365b7c4dc6b978f17a63a2132907c34f88dcd4a47a68688b4e50c50cc6375a26c2c17ac9b4cd015b63ebb311237951b67d705af8a558aea82ddaf632506b2b895e7b8032b03ca96058a502dd5b943cf51d13dcdd7c29747941584541ccf4e324a05e0f7acf604c2453add1b77fc37e39c918b99c6adbc6389a2a5eb3b34a066a62f3afaa8b54010d9ebb0e4fd7b84c12c7f57b29dcf2b55c726aa9cbe4f359cd6f61051823cc3235a0f8cc2f96aeb6c94529e1b675d3533c898636ecb8b819f90a7fff2bbce2e57ca3635b34c6209eb88d039967933abb1002c3f1ebecd49a9bdd5e6bd66c8a3f7c949fa42b07ef1ef8870ab281757bd3e7d1636dee8f7868959a52fcb26a9e5aca14c17966b57c00efdf36da57c01d149070931d37af4eef521477c253e7a2b7c46d7d3af73df951b50308beffdeb8187f58a8dd13aa13e2b7110bafcfefc033746b8f5e26fbb802e04e88ffc48c6dc84225183d4e5c8126a77f053765049fa901c171fbc6667d780596315581753956cf43b531b7eb1c61a5448159b4d442bdeb44fb08c3370f5c357fe29cda0b0816447277de560e5157db80bc37678c966568f9896cbbecbdb0e7c7bdbdcccf0cae501b371808227cf51a201ac09e4f45b071322590527a91f9b3a31295a88d1a382a88d66b989dd3b7e31e1c824bb484765706bec65683a56d06b62f34e8cd90b66529eb1d9ae1aa31cbe96e371caef4d205eaa45acebd50831d884b97a6a4912bbb10604f0be84bace84cd1866fdba8cc27196ad07b95dcc06b32e84b2a40361942c23426fb79a69e7237eba85f3e99026df78615bc80b2219a050ca81f2b009dd09979eeb2e9517d383ccbd5c57d045e42a5c72c665620d1ae8354aab2cd6c2af8", 0x1000, 0x0, 0x0, 0x2}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x6, 0x1000, 0xffffffffffffffff, &(0x7f0000002380)="99bbb000154d17b4696eea75543aea4a4774ee5c99b391010fa7c03fcb39b0d0e25145d7378d2d1b3001feedee97cba0b6bf33d9b72a79157e4b9c91d8439c81fc5ca653bc21fc8e28d7e597254351eae67fd99a455f3d69e1e9c1af8aaa4add72dc68", 0x63, 0xffffffffffffff81, 0x0, 0x1, r7}])
r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r8, &(0x7f0000000040)="03212139", 0x400000)

14:09:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4018aebd, 0x541000)

[  770.062144][T10785] kvm_mmu_after_set_cpuid: 1 callbacks suppressed
[  770.062160][T10785] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  770.095720][T10800] loop4: detected capacity change from 0 to 6
[  770.187458][T10800] FAT-fs (loop4): Directory bread(block 771) failed
[  770.217358][T10800] FAT-fs (loop4): Directory bread(block 772) failed
14:09:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xd00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  770.294212][T10800] FAT-fs (loop4): Directory bread(block 773) failed
[  770.329923][T10800] FAT-fs (loop4): Directory bread(block 774) failed
14:09:06 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x16183, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f0000000200)="7c8c0c5899f96f905a30d99f0924f96ea1e4a8aa7d33e0647a63b4d8dcabb98298e8df24e0ccf0072aeceb91b1978ea95e6ee255e212ad6f9b9e607bebe5b457626d32cb63098c98777a6b9079a54043a4edbf0a8e84d3a462bb5c8ed24dd1922ac8df6f2bfb9a3237a754292da034843b164547576fa14aa4ecddedd80ed32ca53530cd8b3a4bc3c579f4655a90f11e5d0710b8e6bb5da640152c6ede03db8f90b5a18bcdfd7ea33eb967971112270b405f93eba389b6ccfb892ec1fd1f2ddeefa1d84e59dcac972c395d3cdf43b992f269c47ce6c56d953ffade21198529972d4207aa69adbf353f648a69cc", 0xed)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x5008}, {r1, 0xc0}, {r1, 0x20}], 0x3, 0x4)
write$qrtrtun(r1, &(0x7f00000000c0)="be", 0x1)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1})
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x202)
write$qrtrtun(r3, &(0x7f00000001c0)="c72a12d39b4ec4ed3495a9c5663b1002d2f5a2d1da732e6b7768fac43999268916646350e28e77fe3d303eb29491", 0x2e)

14:09:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001040240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:06 executing program 1 (fault-call:5 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  770.548916][T10824] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  770.574691][T10824] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  770.615297][T10832] FAULT_INJECTION: forcing a failure.
[  770.615297][T10832] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  770.617279][T10838] loop4: detected capacity change from 0 to 6
[  770.649327][T10832] CPU: 1 PID: 10832 Comm: syz-executor.1 Not tainted 5.14.0-rc3-syzkaller #0
[  770.658110][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  770.668173][T10832] Call Trace:
[  770.671445][T10832]  dump_stack_lvl+0x1d3/0x29f
[  770.676118][T10832]  ? show_regs_print_info+0x12/0x12
[  770.681308][T10832]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  770.687016][T10832]  ? __fs_reclaim_acquire+0x30/0x30
[  770.692209][T10832]  should_fail+0x384/0x4b0
[  770.696628][T10832]  prepare_alloc_pages+0x1d1/0x5a0
[  770.701762][T10832]  __alloc_pages+0x14d/0x5f0
[  770.706344][T10832]  ? __rmqueue_pcplist+0x2030/0x2030
[  770.711630][T10832]  alloc_pages_vma+0x520/0xe40
[  770.716395][T10832]  do_anonymous_page+0x31b/0x14a0
[  770.721409][T10832]  ? do_swap_page+0x2720/0x2720
[  770.726241][T10832]  ? fault_around_bytes_set+0xb0/0xb0
[  770.731779][T10832]  handle_mm_fault+0x17f7/0x2500
[  770.736721][T10832]  ? numa_migrate_prep+0x190/0x190
[  770.741828][T10832]  ? __init_rwsem+0x160/0x160
[  770.746494][T10832]  ? vmacache_find+0x228/0x5d0
[  770.751251][T10832]  do_user_addr_fault+0x8ce/0x10c0
[  770.756358][T10832]  exc_page_fault+0xa1/0x1e0
[  770.760931][T10832]  ? syscall_exit_to_user_mode+0x4b/0x60
[  770.766556][T10832]  ? asm_exc_page_fault+0x8/0x30
[  770.771478][T10832]  asm_exc_page_fault+0x1e/0x30
[  770.776327][T10832] RIP: 0033:0x409f27
[  770.780221][T10832] Code: c7 c0 ff ff ff ff e9 1e fc ff ff 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55 41 54 41 bc 00 00 c0 fe 55 53 48 81 ec 48 1b 00 00 <48> 89 bc 24 b8 00 00 00 4c 8d ac 24 30 07 00 00 48 89 b4 24 b0 00
[  770.800593][T10832] RSP: 002b:00007f14b8ba2600 EFLAGS: 00010206
[  770.806651][T10832] RAX: 0000000000409f10 RBX: 000000000056bf80 RCX: 0000000020000480
[  770.814606][T10832] RDX: 0000000020fe7000 RSI: 0000000000000005 RDI: ffffffffffffffff
[  770.822566][T10832] RBP: 00007f14b8ba41d0 R08: 0000000000000001 R09: 0000000000000000
[  770.830528][T10832] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fec00000
[  770.838483][T10832] R13: 00007ffc16fc7f9f R14: 00007f14b8ba4300 R15: 0000000000022000
[  770.913499][T10838] FAT-fs (loop4): Directory bread(block 1027) failed
[  770.923078][T10838] FAT-fs (loop4): Directory bread(block 1028) failed
[  770.944109][T10838] FAT-fs (loop4): Directory bread(block 1029) failed
14:09:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x401c5820, 0x541000)

14:09:06 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x88200, 0x1, 0x10}, 0x18)
openat(r1, &(0x7f0000000100)='./file0\x00', 0x40100, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000580)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="10c5ac5f27c2db104d428e9502bfa591885366138e68e8150100000001020000278c934454b492debc975e53562bff9c1834184c9051596cfb87e5d359554a645ca59cd756b51d24f0070d46c61d7ec187036a97", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', <r6=>0x0, 0x4, 0xf1, 0x9, 0x7ded69e2, 0x22, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x10001, 0xb2}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x1)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  770.967101][T10838] FAT-fs (loop4): Directory bread(block 1030) failed
[  770.982804][T10832] syz-executor.1 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000
[  771.022548][T10832] CPU: 1 PID: 10832 Comm: syz-executor.1 Not tainted 5.14.0-rc3-syzkaller #0
[  771.031358][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  771.041426][T10832] Call Trace:
[  771.044715][T10832]  dump_stack_lvl+0x1d3/0x29f
[  771.049410][T10832]  ? show_regs_print_info+0x12/0x12
[  771.054619][T10832]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  771.060365][T10832]  ? asan.module_dtor+0x20/0x20
[  771.065237][T10832]  dump_header+0xdb/0x970
[  771.069587][T10832]  oom_kill_process+0xf0/0x3a0
[  771.074367][T10832]  out_of_memory+0x849/0xa20
[  771.078969][T10832]  ? unregister_oom_notifier+0x20/0x20
[  771.084442][T10832]  ? mutex_trylock+0x1c9/0x270
[  771.089215][T10832]  ? pagefault_out_of_memory+0x9d/0x110
[  771.094773][T10832]  pagefault_out_of_memory+0xbb/0x110
[  771.100150][T10832]  ? dump_header+0x970/0x970
[  771.104758][T10832]  exc_page_fault+0xa1/0x1e0
[  771.109350][T10832]  ? syscall_exit_to_user_mode+0x4b/0x60
[  771.114990][T10832]  ? asm_exc_page_fault+0x8/0x30
[  771.119933][T10832]  asm_exc_page_fault+0x1e/0x30
[  771.124787][T10832] RIP: 0033:0x409f27
[  771.128687][T10832] Code: c7 c0 ff ff ff ff e9 1e fc ff ff 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55 41 54 41 bc 00 00 c0 fe 55 53 48 81 ec 48 1b 00 00 <48> 89 bc 24 b8 00 00 00 4c 8d ac 24 30 07 00 00 48 89 b4 24 b0 00
[  771.148297][T10832] RSP: 002b:00007f14b8ba2600 EFLAGS: 00010206
[  771.154371][T10832] RAX: 0000000000409f10 RBX: 000000000056bf80 RCX: 0000000020000480
[  771.162346][T10832] RDX: 0000000020fe7000 RSI: 0000000000000005 RDI: ffffffffffffffff
14:09:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001050240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  771.170323][T10832] RBP: 00007f14b8ba41d0 R08: 0000000000000001 R09: 0000000000000000
[  771.178297][T10832] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fec00000
[  771.186276][T10832] R13: 00007ffc16fc7f9f R14: 00007f14b8ba4300 R15: 0000000000022000
14:09:07 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x46182)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4020940d, 0x541000)

14:09:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xe00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  771.359106][T10832] Mem-Info:
[  771.362815][T10832] active_anon:282 inactive_anon:230468 isolated_anon:0
[  771.362815][T10832]  active_file:6276 inactive_file:103517 isolated_file:0
[  771.362815][T10832]  unevictable:768 dirty:192 writeback:0
[  771.362815][T10832]  slab_reclaimable:21272 slab_unreclaimable:98966
[  771.362815][T10832]  mapped:63626 shmem:8855 pagetables:2567 bounce:0
[  771.362815][T10832]  free:1098564 free_pcp:12076 free_cma:0
[  771.437251][T10832] Node 0 active_anon:1128kB inactive_anon:921132kB active_file:24988kB inactive_file:414168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:254504kB dirty:768kB writeback:0kB shmem:33244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 790528kB writeback_tmp:0kB kernel_stack:10380kB pagetables:10464kB all_unreclaimable? no
[  771.535716][T10881] loop4: detected capacity change from 0 to 6
[  771.538974][T10873] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  771.585799][T10881] FAT-fs (loop4): Directory bread(block 1283) failed
[  771.587914][T10873] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  771.604720][T10832] Node 1 active_anon:0kB inactive_anon:640kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:0kB pagetables:4kB all_unreclaimable? no
14:09:07 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080))

14:09:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4048ae9b, 0x541000)

[  771.616606][T10881] FAT-fs (loop4): Directory bread(block 1284) failed
14:09:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xf00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  771.691224][T10881] FAT-fs (loop4): Directory bread(block 1285) failed
[  771.721236][T10881] FAT-fs (loop4): Directory bread(block 1286) failed
[  771.754404][T10832] Node 0 DMA free:15360kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
14:09:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001060240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  771.917242][T10904] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  771.937532][T10832] lowmem_reserve[]: 0 2643 2643 2643 2643
[  771.961913][T10904] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  771.968947][T10832] Node 0 DMA32 free:386656kB min:35660kB low:44572kB high:53484kB reserved_highatomic:0KB active_anon:1124kB inactive_anon:922464kB active_file:25052kB inactive_file:414836kB unevictable:1536kB writepending:760kB present:3129332kB managed:2713872kB mlocked:0kB bounce:0kB free_pcp:38892kB local_pcp:17708kB free_cma:0kB
[  772.047322][T10913] loop4: detected capacity change from 0 to 6
[  772.066423][T10913] FAT-fs (loop4): Directory bread(block 1539) failed
[  772.073478][T10913] FAT-fs (loop4): Directory bread(block 1540) failed
[  772.082775][T10913] FAT-fs (loop4): Directory bread(block 1541) failed
[  772.090405][T10913] FAT-fs (loop4): Directory bread(block 1542) failed
[  772.110982][T10832] lowmem_reserve[]: 0 0 0 0 0
[  772.130003][T10832] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:196kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  772.172004][T10832] lowmem_reserve[]: 0 0 0 0 0
[  772.176861][T10832] Node 1 Normal free:3995524kB min:54244kB low:67804kB high:81364kB reserved_highatomic:0KB active_anon:0kB inactive_anon:640kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:7712kB local_pcp:6464kB free_cma:0kB
[  772.210116][T10832] lowmem_reserve[]: 0 0 0 0 0
[  772.214945][T10832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  772.234375][T10832] Node 0 DMA32: 143*4kB (UME) 29*8kB (UME) 714*16kB (UE) 493*32kB (UE) 371*64kB (UE) 194*128kB (UE) 112*256kB (UM) 83*512kB (UM) 66*1024kB (UME) 21*2048kB (UME) 32*4096kB (UM) = 389412kB
[  772.276715][T10832] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  772.294490][T10832] Node 1 Normal: 37*4kB (UE) 28*8kB (UE) 23*16kB (UME) 169*32kB (UME) 62*64kB (UME) 10*128kB (UME) 3*256kB (U) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 971*4096kB (M) = 3995524kB
[  772.324329][T10832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  772.355739][T10832] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  772.373646][T10832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  772.386636][T10832] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  772.406389][T10832] 59649 total pagecache pages
[  772.413248][T10832] 0 pages in swap cache
[  772.417514][T10832] Swap cache stats: add 0, delete 0, find 0/0
[  772.432168][T10832] Free swap  = 0kB
[  772.435982][T10832] Total swap = 0kB
[  772.444980][T10832] 2097051 pages RAM
[  772.448884][T10832] 0 pages HighMem/MovableOnly
[  772.472073][T10832] 385289 pages reserved
[  772.488176][T10832] 0 pages cma reserved
[  772.494269][T10832] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=10832,uid=0
[  772.528479][T10832] Out of memory (oom_kill_allocating_task): Killed process 10832 (syz-executor.1) total-vm:93388kB, anon-rss:2216kB, file-rss:35988kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  772.581962][ T1647] oom_reaper: reaped process 10832 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
14:09:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4090ae82, 0x541000)

14:09:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff000004005f000a00060050505050505000000a000600505050505050000004005f000600360003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/151, 0x97, 0x40010127, &(0x7f00000003c0)=@l2={0x1f, 0x6, @any, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4000000)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000780))
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1000000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001070240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:08 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000027c0)={<r2=>0x0, 0x7, 0x1, [0x8, 0x8001, 0x82, 0x80, 0x8], [0x5, 0x2, 0x1, 0x100, 0x7ce7a100, 0x0, 0xa, 0x10001, 0xd000000000000000, 0x8, 0x6, 0x1ff, 0xffffffff00000001, 0x7fffffff, 0x80000001, 0x8, 0x1a, 0x3, 0x7, 0x4, 0xb3, 0x4, 0x3f, 0x6, 0x9, 0xbdd, 0xa46, 0x7f, 0x3, 0x800, 0x0, 0x9, 0x9, 0x8, 0x2, 0x5, 0x1ff, 0x6, 0x100000000, 0xffffffffffffffff, 0x7, 0x1606, 0x80000001, 0x8001, 0x0, 0x4, 0x2, 0x7, 0x9, 0x100000000, 0x7, 0x3, 0x100000001, 0x7fff, 0x5, 0x7fff, 0x4f46, 0x1, 0x4c7c80000, 0x2, 0x10000, 0x2, 0xffffffffffffffff, 0x100000000, 0x1, 0x1f, 0x100, 0x7fff, 0x7fff, 0x20, 0x6, 0x6, 0x100, 0x7, 0x6, 0x8, 0x8, 0x9, 0x2, 0x0, 0x11bf905e, 0x100000001, 0x0, 0xff5b, 0x8, 0x5, 0x100000000, 0x9, 0x100, 0x65c, 0x7, 0x95c, 0x80000001, 0x3f, 0x7, 0xffffffff00000000, 0x7, 0x7, 0x6d5c93d2, 0x1, 0x9, 0x542d, 0x9, 0xfff, 0x68e7, 0x4, 0xffffffffffffffff, 0x4, 0x1d, 0x8, 0x4, 0x4f3, 0x645, 0x401, 0x5, 0x980e, 0x0, 0x4, 0x1000, 0x2, 0xfffffffffffffffe]})
r3 = perf_event_open(&(0x7f0000003640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r4=>0x0, <r5=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r5, 0x0, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r6]}, @devid})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00')
preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000480)=""/1, 0x1}], 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r8=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYRESOCT, @ANYRES32=r4, @ANYRESOCT=r4, @ANYRES64, @ANYRESHEX=r3], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002c00)={0x14, 0xf, {0x20, @struct={0x9, 0x8}, 0x0, 0x40, 0x1000, 0x4e61c30c, 0xffffffffffffffff, 0x1, 0x480, @struct={0x5, 0x20}, 0x1f, 0x3, [0x1f, 0x3, 0x1, 0x1, 0x6b, 0x1ff]}, {0x5, @usage=0x8, r2, 0x9, 0x8, 0x9, 0x425, 0xfffffffffffffffd, 0x10, @usage, 0x9a5, 0x4, [0x9, 0x8001, 0x4, 0x10000, 0x4, 0x1]}, {0x5, @struct={0x5, 0x8}, r8, 0x72, 0x75561817, 0x5, 0x0, 0x7, 0x410, @usage=0x8, 0x2, 0x1, [0xfffffffffffffffa, 0x120000, 0x8000, 0x1, 0xf599, 0x1]}, {0x800, 0xfff, 0x1}})
preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/97, 0x61}], 0x4, 0x39e, 0x0)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002740)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0828c00140000", @ANYRES32, @ANYBLOB="c2dfd1d4d40b9cd02abbf8ba5b08a7bde07cf9f3215d699efbd90212000e002f6465762f717274722d74756e00000008002600", @ANYRES32=0x0, @ANYBLOB="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"], 0x23a0}, 0x1, 0x0, 0x0, 0x2000}, 0x4001)

[  772.779102][T10931] loop4: detected capacity change from 0 to 6
[  772.808517][T10933] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  772.845869][T10933] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  772.882145][T10931] FAT-fs (loop4): Directory bread(block 1795) failed
14:09:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4138ae84, 0x541000)

[  772.901431][T10939] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  772.928627][T10931] FAT-fs (loop4): Directory bread(block 1796) failed
[  772.953356][T10931] FAT-fs (loop4): Directory bread(block 1797) failed
[  772.997981][T10939] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  773.004034][T10931] FAT-fs (loop4): Directory bread(block 1798) failed
14:09:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1100000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001080240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0xa, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:09 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/4096)
r1 = dup2(r0, r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000001100), r1)
ftruncate(r0, 0x800)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
openat$nvram(0xffffffffffffff9c, &(0x7f00000010c0), 0x2800, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x4)

14:09:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x541000)

[  773.362263][T10975] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  773.378132][T10975] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  773.395621][T10985] loop4: detected capacity change from 0 to 6
[  773.426933][T10980] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  773.438842][T10985] FAT-fs (loop4): Directory bread(block 2051) failed
[  773.454125][T10980] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  773.494768][T10985] FAT-fs (loop4): Directory bread(block 2052) failed
14:09:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1200000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x80086301, 0x541000)

[  773.555645][T10985] FAT-fs (loop4): Directory bread(block 2053) failed
[  773.615087][T10985] FAT-fs (loop4): Directory bread(block 2054) failed
14:09:09 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x100)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x29, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:09 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x200200)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x4, 0x12}, 0x18)
r3 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x7fffffff, 0x4c4200)
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x5)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
io_submit(0x0, 0x7, &(0x7f0000000980)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f00000002c0)="b9af17608fd0f4c37bdbf19ed7fba2b80c3febac463117f9822ea8c9bd6d635015ce6a468ec72f13339946efe19d1e4005b627d9130dc920e9bc8c527e46a0da5d4aa3364dc002d2152c1ac1f8e69b83", 0x50, 0x7, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x8, r2, &(0x7f0000000400)="963cf372e21eec0d2c7ed336c1af11771beb4681616f39d075c5d03ad690c0b0b1bb576e9272423c39f3a0b22683ac1c7e122bcdd95faa64b92338409a310bc4fd264b0a9454286c9157f72a9a6365ae81798f7bbedc9134f000317ba0efefe34203df607ebf274c37f7c92a837d8d16e96ca7b735e485b04ca52d5b62e12a13794b2b9421bbf29be0b34621ce7f10a3e4447d5e85ca0d1f37f3153ee0bc05fbc3f42a941255aba5de883f979db254", 0xaf, 0x7fff000000, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000500)="93cb705130f1772894729ebaf8daeccc255ce62d6b55b643eb30e27a6657edcc86fa666f1f7f2f385a9d85a8001b5b32db86a1c87102bdbf872e9e9a40e2da657d729c1128bce9c3e09ad8f1c3e4f138a2296b729936575bba3982122809c1b36d9b408f5f7c7d667d2a0d4019e19715a651d5edb0ab4347193eef6449d64f343ee78172624f9bc2ff16755ab610df2c71c3501d851e5ae030dd7d85be4afcdc1072e0ef27e5b7076903e9a657085efa0d7153bd84f0f50ece2903a14af8dc5a9c85daed854585ab5d9625ed3bb20dab70449515b0732ab50ef1652623a32c", 0xdf, 0x1, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x1ff, r0, &(0x7f0000000640)="91d1d29aa7498287357ddbb86e60c4fb46ef19aefd12ff196004abc1da628058161af2824c36fa3a35759fff778261c107314a162a30b43022514565745f7e8f9b9e667e0f2166f03e420acde0c41eb13b4e9afb16ce55e0e1be4a79272d786cf39c96f51ec7", 0x66, 0x4, 0x0, 0x2, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x15f, r4, &(0x7f0000000740)="5a94f088f0d3ddf37ad02ac55d786cde9ec2c00e3019aec82f81120e39e774948c19afbb589dda262a8fd1c5f1c90c417da803ddb4ea3b88026dd6adc34393552834620a9858f0e7ca4055dd83", 0x4d, 0x400000000000000, 0x0, 0x2, r5}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000800)="89e8dc27e593d934dbc4ba3b0b1a4b44bec3a483690c90018587c832cc51514b78f93e1bd29ddaa60c50a63c8f6efb945ea52fdd24dc5d2f7c3e3977a3d213616dd7a2b7809686c88e749eeebdaa7d0c4ba63ed9fe06623a103146484c01dd9fc328668e189e7f7bfb676747aacf57a3fe8176b4f6c202970b3a8bfc7792bf0b5f83559e9c5ac500535db3228e0402f89226d4da15f6abd87b7dd1de75f9", 0x9e, 0x6}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x101, r0, &(0x7f0000000900)="e92cdcd1e989cc695649d5bce41870686725a7", 0x13, 0x2, 0x0, 0x1, r6}])
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000240)={{r0}, {@val, @max}})
mmap(&(0x7f0000443000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r7, 0xee920000)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
accept$unix(r7, &(0x7f0000000180), &(0x7f0000000200)=0x6e)
write$qrtrtun(r7, &(0x7f0000000080)="825e0c726f76e281d925f248f539365e625379d45948c27249a741205f760e6f41d292d8a41a7f4455e5c6db0e6b6f68bc5e9ff3b57a6bcd526affd1095914de97232db058f0e66748b58b36923ada36d49cfe467daebeac361faf9f7a76e22f168d0a77d0c2358c206b40d9b4ded5adaaf966d007125600a1eb113ef28f8b26c54db36f29132bd837408776a8f17be2029ccbaa270bb16cbd8e437a34838dfe2cf9e9ce3c405f7ac22d5af780fbc666853fe3b56390524e5ece2a508e315a369dba02f8062916f615e7049ee2a060", 0xcf)

14:09:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001090240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  773.774152][T11014] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  773.799774][T11014] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x80086601, 0x541000)

[  773.841507][T11023] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1400000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:09 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x82)
write$qrtrtun(r0, &(0x7f0000000000)="ff048c1597e7911955669651e04cc026741e59f1aff5faac52f633730451f437a33b46c7adce1345db820ae35a91f0a89ce976", 0x33)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  773.964033][T11038] loop4: detected capacity change from 0 to 6
14:09:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x30, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  774.046429][T11038] FAT-fs (loop4): Directory bread(block 2307) failed
[  774.082631][T11038] FAT-fs (loop4): Directory bread(block 2308) failed
[  774.110394][T11038] FAT-fs (loop4): Directory bread(block 2309) failed
[  774.146644][T11038] FAT-fs (loop4): Directory bread(block 2310) failed
14:09:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x801c581f, 0x541000)

14:09:10 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sync_file_range(r1, 0xec56, 0xebd9, 0x2)
write$qrtrtun(r0, &(0x7f0000000040)="03212139e63bd2a981cb21d56133f4d737c596fefe5328d3cbac50e5715feab41bbba6b6", 0x24)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

14:09:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280010a0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x4008ae90, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  774.439088][T11092] loop4: detected capacity change from 0 to 6
[  774.491826][T11092] FAT-fs (loop4): Directory bread(block 2563) failed
[  774.531485][T11092] FAT-fs (loop4): Directory bread(block 2564) failed
[  774.594452][T11092] FAT-fs (loop4): Directory bread(block 2565) failed
[  774.616441][T11092] FAT-fs (loop4): Directory bread(block 2566) failed
14:09:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x0)

14:09:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1700000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:10 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x3b1002, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000001c0)={{r0}, "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"})
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000080)="113d96938f2ae2e2414a031f5fbcecde347d41cf5be95568bd5f20c9284b496f13ef911115e5742bf08ada1042ea004e3d80b1ec0d4b33818f29c18810a5f1fcdabe22dc3d7142bc4bda94145ecb5a2ec85cf80d530cd2c989ff471f034bdfe6da86b02d7be85c7b364c3074485c1c553d4ad224a31537ef706179b7d984ecaf41d17b4a360d9c85bbf4f6c4ed60f107940d7b02fa9217b73eecb079da5a572ba0c660be7042f4e72793859e614124153521f64ce01e6ac08ec0dff77505d565d9b514f7445153102d61cf270a30c411d3e5b445440283bc1c0af8fb766e1122", 0xe0)

14:09:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8090ae81, 0x541000)

14:09:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x8138ae83, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280010b0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  774.836922][T11118] loop4: detected capacity change from 0 to 6
14:09:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8138ae83, 0x541000)

[  774.907109][T11124] kvm_mmu_after_set_cpuid: 5 callbacks suppressed
[  774.907125][T11124] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  774.924822][T11118] FAT-fs (loop4): Directory bread(block 2819) failed
[  774.928698][T11125] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:10 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
write$qrtrtun(r0, &(0x7f0000000080)="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", 0x1000)

[  774.951226][T11118] FAT-fs (loop4): Directory bread(block 2820) failed
[  774.997687][T11118] FAT-fs (loop4): Directory bread(block 2821) failed
[  775.033217][T11118] FAT-fs (loop4): Directory bread(block 2822) failed
[  775.085777][T11144] qrtr: Invalid version 42
14:09:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1800000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0xc008ae05, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280010c0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  775.148597][T11146] qrtr: Invalid version 42
14:09:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x541000)

[  775.282119][T11156] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  775.282767][T11157] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  775.318014][T11156] kvm_mmu_after_set_cpuid: 6 callbacks suppressed
[  775.318028][T11156] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  775.318343][T11164] loop4: detected capacity change from 0 to 6
[  775.347189][T11157] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  775.386453][T11164] FAT-fs (loop4): Directory bread(block 3075) failed
[  775.403076][T11164] FAT-fs (loop4): Directory bread(block 3076) failed
[  775.434243][T11164] FAT-fs (loop4): Directory bread(block 3077) failed
[  775.462858][T11164] FAT-fs (loop4): Directory bread(block 3078) failed
14:09:11 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

14:09:11 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x8082)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xc0045878, 0x541000)

14:09:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1900008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280010d0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  775.844428][T11199] loop4: detected capacity change from 0 to 6
[  775.904340][T11200] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  775.920108][T11201] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  775.923662][T11199] FAT-fs (loop4): Directory bread(block 3331) failed
[  775.942051][T11200] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:11 executing program 5:
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000024c0)={0x0, 0x4, 0x2})
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
mq_open(&(0x7f0000000080)='/dev/qrtr-tun\x00', 0x80, 0x0, &(0x7f00000000c0)={0x7, 0x0, 0x10001, 0x60000000000})
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xc0045878, 0x541000)

[  775.952493][T11201] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  775.992868][T11199] FAT-fs (loop4): Directory bread(block 3332) failed
[  776.030683][T11199] FAT-fs (loop4): Directory bread(block 3333) failed
[  776.048289][T11199] FAT-fs (loop4): Directory bread(block 3334) failed
14:09:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1a00008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280010e0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x3}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xc0189436, 0x541000)

[  776.283023][T11245] loop4: detected capacity change from 0 to 6
[  776.308135][T11238] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  776.337471][T11238] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  776.339041][T11245] FAT-fs (loop4): Directory bread(block 3587) failed
[  776.372347][T11252] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  776.385579][T11245] FAT-fs (loop4): Directory bread(block 3588) failed
[  776.425086][T11252] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  776.433929][T11245] FAT-fs (loop4): Directory bread(block 3589) failed
[  776.454905][T11245] FAT-fs (loop4): Directory bread(block 3590) failed
14:09:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xc018ae85, 0x541000)

14:09:12 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x301500)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x1)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f0000000240)="9fd8a5047a2ef87168a75e4707f603d41d0d158e18a1923d47f5206fd9b42135d69517fdbbe2dca846a7e31e165831e2bc5549873d559106e9", 0x39)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x50}, 0x20)
wait4(r1, &(0x7f0000000140), 0x40000000, &(0x7f0000000180))
process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/180, 0xb4}], 0x4, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000600)={0xc, 0x2bd})
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1d00008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280010f0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x4}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@preq={0x82, 0x25, @not_ext={{0x0, 0x1, 0x1}, 0xe1, 0x5, 0x1000, @broadcast, 0x581, "", 0x3ff, 0x800, 0x1, [{{0x1}, @broadcast, 0x200}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6de67214bf94"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x60b9332f170ba848)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000380)=""/147, 0x93, 0x40010126, &(0x7f0000000300)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="8043afac9a281c03d920e1381a413f6f9221fee96ee80055cf7da374f04eb9f7b71af281097efa9566bb6940b705cb50e657c06d47b4ec7701a1a211f925ede1589b7c3f28e81e000000004e029d1fc5f436a35787c2565e95fa2a3824157db3158e5b37c83c09adbf96339079b33e034ed337be29b954511f84a00b5fc8cf0000ea9aa3e88a6389ccd547489f6b", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  776.796919][T11282] loop4: detected capacity change from 0 to 6
[  776.822992][T11282] FAT-fs (loop4): Directory bread(block 3843) failed
[  776.842747][T11285] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  776.862305][T11282] FAT-fs (loop4): Directory bread(block 3844) failed
[  776.875674][T11285] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  776.886688][T11293] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xc020660b, 0x541000)

[  776.891250][T11282] FAT-fs (loop4): Directory bread(block 3845) failed
[  776.914537][T11282] FAT-fs (loop4): Directory bread(block 3846) failed
[  776.951752][T11293] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1e00008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:12 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f0000056000/0x4000)=nil, 0x4000, 0x2000000, 0x830, r2, 0x8494a000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000010c0)={0x9, 0x3, 0x4, 0x8, 0x6, {}, {0x2, 0x0, 0x3, 0x1, 0x9, 0x8, "a1b8af3d"}, 0x0, 0x3, @userptr=0x3, 0x6, 0x0, <r5=>r1})
r6 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r7 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001180), 0x201)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001140)=[r0, r3, r4, r5, r0, r6, r7, r0], 0x8)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000080)="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", 0x1000)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001100240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x5}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  777.210004][T11330] loop4: detected capacity change from 0 to 6
[  777.219514][T11326] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xc0306201, 0x541000)

[  777.268361][T11330] FAT-fs (loop4): Directory bread(block 4099) failed
[  777.295128][T11330] FAT-fs (loop4): Directory bread(block 4100) failed
14:09:13 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r3 = fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1)
tee(r2, r3, 0x81, 0x8)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
read$qrtrtun(r1, &(0x7f0000000080)=""/54, 0x36)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r4 = dup3(r0, r0, 0x0)
dup2(r0, r4)

[  777.313641][T11330] FAT-fs (loop4): Directory bread(block 4101) failed
[  777.337478][T11330] FAT-fs (loop4): Directory bread(block 4102) failed
[  777.359408][T11334] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1f00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001110240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x540a00)

14:09:13 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x582)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  777.644588][T11374] loop4: detected capacity change from 0 to 6
[  777.693179][T11374] FAT-fs (loop4): Directory bread(block 4355) failed
[  777.710399][T11374] FAT-fs (loop4): Directory bread(block 4356) failed
[  777.717497][T11374] FAT-fs (loop4): Directory bread(block 4357) failed
[  777.724874][T11374] FAT-fs (loop4): Directory bread(block 4358) failed
14:09:13 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)="7101030189c0c81bb5b7c6470259b1c4a86b8b7a933900a37e8d5355fd6f9069766e21ea04629317b2f04ac17e57f14f8dcc0b39dba5913b3587a7333bbd1e9d0dfd0c9387a9ee131a014d835affabc361713fd477db9c22d05f5ff62885e2503548cd82a48c29eefae2988341525a573516ac41bd59451bc86a8964bc96030dabdb6613123ed017489ba0652ddcec8beedabef79270e24630440c38e114", 0x9e}, {&(0x7f0000000180)="99d8dbaa9458dc61cf1e0429bcae4da42c7a436b8241666d66c527350c12bda8f50357155cd49a7a333df08c2e2fbd75cd350e016ba176232a70fca9a9d462f3536f8016bb755edc7ba7e2887294f2da6f111b13b37ebe3ab116cfdf218728b10973502bf5c07015eb402922ab354c69441b6d9557067f713aab4e5d5cc61217ca79aa570436f95d507c922ffef32e31a07c", 0x92}, {&(0x7f0000000240)="4bb7e4eff2e7a41bd100b10442d332868371121c1bfa920c7be45048e1138bd4ebf75b375ba5aa4233909cdec6bf172787364bed63381609bdfc9175b75fa3a27697d6fb376800e4c74aa6ee0d1581745f106daec249d1044af084ad7c09250c64bdf8a0361ca456c40a5f56c0bd45940d010c257baf90", 0x77}, {&(0x7f0000000040)="e727930314cfa9d590775d7a3bf2f8b7fb63c3add4e5357f69bc39fce55ec61c0fc87aa3637524a376601ed89474", 0x2e}], 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x0, 0x80000000, 0xffffffff)

14:09:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x6}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:13 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="219dfe7a34545296791e184356b1e1fe5c26f75885df1787220a0cd9de827fabc3e72a7ed846a38724781e5d5c15dac9d3e554cdc52bfc09c8a1606df29573ec44f810dbdb8222d337fb588635625836669c9268913996f83c5d8e4f63ddd4961106a55477b63cdbc869a410da7613881e75648227ef6d9ae760d77d96eaa620392c9130311e92791fcfb8f85f89c6bd274deb2ccee59f9eb1241354ea2daf", 0x9f)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0x4})
writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="5972fde45020086ba99544fbd12d1bbd3727c2dac02aa3a8ddc08372116b018d4e54a7862f3a1c4bd97aa5eff2f6e33dd75dc12375c073dd1dce1c2d56dde4b9dadf99d28b079e7d826bfd625dcde85d10564df0672d", 0x56}, {&(0x7f0000001240)="f2729ef6a996abc1dc777c9bc7629513a7df4b2859c35e8b287e5f767e151900e341717face50efcc5e629cb81a00dad47d256dcaeab32526ea07be26b8d61ad63fc21a975b031925ebf93dbeea1fd631e63738e33ea006475d615b69e02f8e1406a56761dabfe1a0b0b2e078529fd0a0bbb43e2373bdfb63d61d7c483c2802fd78ee52f9f7b97a97b81e8651d7c6266312d3c902ba1bd1ef2e76b6ef15fbb20b835147c0e787bb4abfd9b6736539e52086a78b8bf405af2d82f3f8846b6d184e44aa2654c96c9427c20391737defcab8af270063be1572246bf7b04c2eca8db242deef54362697dfae03b2d96f2d97096977fedd92c1bce", 0xf8}, {&(0x7f0000001340)="ddedd9e470ce65a6c22e282ba47d2c2d1ef97fb735b33dce07c9d7c95155b7c1151e47d1969ce83cd1bba1471d53529345c58779a68be77e64c52557c829dc1e492f28bee663e8e494b0e9c54598e895af90bcd4a1763ba0b8c76e362fed70693adf46d979c5e01e761d0731a1a6a3c0bdeac3ec987dbc48748f4bc191328fd09fcef30553c6", 0x86}, {&(0x7f0000001400)="8171604d941f3cf3c55c97a9f1108091ca67f7006504a946fe873e63ccf878987916341292d3b226d3b8beea0bdb42dc31ef5ae471509d2e85bac7a64ee523eaa56a7c263eaab26ff43a4d451f636467368884f0", 0x54}], 0x5)

14:09:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1f00008000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541002)

14:09:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001120240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541003)

[  777.986645][T11416] loop4: detected capacity change from 0 to 6
14:09:13 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000080)="08fd703281fd5bdb42ec69983d38fc6c058c1cf6256bd24afba904e7fb2e2fb455c628bd2ee435292ee2d1807f35825acb270a464766fd0e5fbca57b5cd57af1ac413c07414bc49c88e01f9b19f446b9198f94db763af590f6121f2c03ffcdbf7f61fa0eaa964431d721e1ee0ebe35ce6cd36ade858ce7b58da3cc90f24eeeeba2eca263a3ea94888a3e03289279e07aad598ca8be366b7c487a160e3484519d64c207c5d6dc51ceb4c803d50d7f522c9349cd173fd19acd718f9010741039f4259ff834c7efcb8c862d", 0xca)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$qrtrtun(r2, &(0x7f0000000040)="f7122139", 0x4)

14:09:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x7}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  778.053515][T11416] FAT-fs (loop4): Directory bread(block 4611) failed
14:09:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x2000000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  778.103508][T11416] FAT-fs (loop4): Directory bread(block 4612) failed
[  778.120246][T11416] FAT-fs (loop4): Directory bread(block 4613) failed
[  778.131348][T11425] qrtr: Invalid version 247
[  778.167907][T11433] qrtr: Invalid version 247
[  778.169707][T11416] FAT-fs (loop4): Directory bread(block 4614) failed
14:09:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541004)

14:09:14 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001180240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x2500000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:14 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
write$qrtrtun(r0, &(0x7f0000000180)="0e7d0ae09743c13612698f45792f4099d2d46e944133e6eeb0e6ca527797da44017c6ac0ac6f9c67902955e7f4acae0ee5b428745244b6ad857abe9625c08f8e16dcdfd81ecb9463ccb4644a65ebe72973931298132023ba8ccb4f137f96cbea50ca40571a5ab967edc76a75ea1cb81691fe62071c224f40f06761f1065d4fa8df379618ec6fdc48a805dace7c0f04c89887408eea2b393cfb627c6cb0fabfd9deb40e8b1a8c0e820eecc25b46ef10f98801be0570ecf35b3c027edc7df9e4fcc610ec17252a2ac57cee45cc514a596da0fd8148c5923b0b74ee74a97041b711a19ff13d42d953e9", 0xe8)
read$qrtrtun(r0, &(0x7f00000000c0)=""/133, 0x85)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)="7e91bcde0ac3ff3680fb31bf089c9c59555589df2b00ee0ae3d2c81c9515518c978db5113a960a07950bf1c42180c515949c49b60805704bab", 0x39)

14:09:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541005)

14:09:14 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="540064337670856133c47cff290100000000000000468e27bfa14a7eb50ea323a66d5a5a400fa170f8eed9877adf0e328462188ade8f45cf0a4794539fcea07743ca9d6651d3524983d57768fa8872da24a846da9ec3ff5c567e55b17675789895949ee9d17e5e094812dea89b99f154663f4f5b738e1d1aec35ddd9a06db3ef42871afc4aeab7b960abe434e50fc87852d1adfc35ec197308ffb180d2bd2e9503d2ce894e790f516891682fd062c616c70fa7", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf25270000000a00060050505050505000000a000600ffffffffffff000004005f000b0034004832c1d4097b12000a000600505050505050000004005f000600360003000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYBLOB="7f0af89210ecac0f3883a19c6f2ea5e480df1ce536e8bbd124baf44dc857a48e7990282e02926dc75042f3eacf11ac05ba6567828da56e6cd696c8efe4cfcdfd3302487f35dae21db52c3b58f587eaa1c4f313977c579f782140fefe302dc112a8a4e890714956283883727a00f1d5b937f1c873e72ba780252cc7a538d34942ea2628f09ec2af0642d23870dee74e7bddd96e2d65af8519f2aabb16e86437bb542e4c5e2f417f52012aaeb0a8ab333e969013df09cb80", @ANYRES32=r3], 0x4}, 0x1, 0x0, 0x0, 0x4810}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  778.874877][T11486] loop4: detected capacity change from 0 to 6
[  778.907622][T11486] FAT-fs (loop4): Directory bread(block 6147) failed
[  778.918790][T11486] FAT-fs (loop4): Directory bread(block 6148) failed
[  778.966147][T11486] FAT-fs (loop4): Directory bread(block 6149) failed
[  778.975236][T11495] qrtr: Invalid version 14
14:09:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x3f00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541006)

[  779.039312][T11486] FAT-fs (loop4): Directory bread(block 6150) failed
14:09:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x9}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001210240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541007)

[  779.255278][T11537] loop4: detected capacity change from 0 to 6
[  779.308521][T11537] FAT-fs (loop4): Directory bread(block 8451) failed
[  779.344650][T11537] FAT-fs (loop4): Directory bread(block 8452) failed
14:09:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541008)

14:09:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x4000000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xa}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  779.402666][T11537] FAT-fs (loop4): Directory bread(block 8453) failed
[  779.432387][T11537] FAT-fs (loop4): Directory bread(block 8454) failed
14:09:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001220240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  779.671056][T11586] loop4: detected capacity change from 0 to 6
[  779.683769][T11586] FAT-fs (loop4): Directory bread(block 8707) failed
[  779.693494][T11586] FAT-fs (loop4): Directory bread(block 8708) failed
[  779.708897][T11586] FAT-fs (loop4): Directory bread(block 8709) failed
[  779.717669][T11586] FAT-fs (loop4): Directory bread(block 8710) failed
[  779.757566][T11589] qrtr: Invalid version 14
14:09:15 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
write$qrtrtun(r0, &(0x7f00000000c0)="9fb666644016093263c866919f701716398d45614bbfa644eb8da155722c026a11a690ae39730aa60c3625c2928349e97799f060c562904e573a1d1edb91e066345ef7ad0fdeb7cbc2249433204c349138b5530f78d69fd4f5b00e0274c7490ead06decd3ab24f67428a08108cde097dce4025dada1a61fb7101b91cf3d9f87f0d213dea8e23abcfeceed9bcebf3756f29e407d811c9eb0ca9c462059943ccc01aba6f65d892c9a421b2d82d433af0ede993dcb7f0d08ad4c29fac", 0xbb)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0)

14:09:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541009)

14:09:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xb}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x4100000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001250240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:15 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x20, 0x70bd26, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x84, 0x0, 0x12345}, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:15 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a4080)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x54100a)

[  779.993328][T11613] loop4: detected capacity change from 0 to 6
[  780.030709][T11610] kvm_mmu_after_set_cpuid: 12 callbacks suppressed
[  780.030726][T11610] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  780.037993][T11614] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  780.061485][T11613] FAT-fs (loop4): Directory bread(block 9475) failed
[  780.101309][T11613] FAT-fs (loop4): Directory bread(block 9476) failed
[  780.148362][T11613] FAT-fs (loop4): Directory bread(block 9477) failed
14:09:16 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
poll(&(0x7f0000000140)=[{r1, 0xa22}, {0xffffffffffffffff, 0x2000}, {r0, 0x64e0}, {r2, 0x2000}, {r3, 0x80}, {r4, 0x100}, {r0, 0x80}, {r5, 0x91cffe30db5cbefd}], 0x8, 0x80000001)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2, 0x0, 0x0)

14:09:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x54100b)

[  780.195834][T11613] FAT-fs (loop4): Directory bread(block 9478) failed
14:09:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xc}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x5c00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc0, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x900000, 0x3a}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffc9}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x10}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1ff}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24b}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8002}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x80}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x40}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000001}, 0x800)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000580)=ANY=[@ANYBLOB="95924bd4928bb46f2e875cba41758d80bf9792e81dbb6c770099ecc66f928a87efc4225da832209c6d0453b37b631a8b6645c43d964efad6abfc8f5fbbbc587d03f48507348a46fd91ce5f0d02958f5b6ea61a694a447a537e59188d9f8de92e687002160e45809ade957349b19eb70ab173f0d1957904", @ANYRES16, @ANYBLOB, @ANYRES32=r5], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001360240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x54100c)

[  780.464338][T11649] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  780.473076][T11648] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  780.498057][T11649] kvm_mmu_after_set_cpuid: 12 callbacks suppressed
[  780.498073][T11649] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  780.522595][T11648] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  780.538778][T11665] loop4: detected capacity change from 0 to 6
[  780.585222][T11665] FAT-fs (loop4): Directory bread(block 13827) failed
[  780.603073][T11665] FAT-fs (loop4): Directory bread(block 13828) failed
14:09:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xd}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x8000000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  780.633009][T11665] FAT-fs (loop4): Directory bread(block 13829) failed
[  780.658151][T11665] FAT-fs (loop4): Directory bread(block 13830) failed
14:09:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001410240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x54100d)

[  780.796841][T11683] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  780.856859][T11685] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  780.868302][T11683] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  780.899388][T11685] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  780.923130][T11703] loop4: detected capacity change from 0 to 6
14:09:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x54100e)

[  780.957082][T11703] FAT-fs (loop4): Directory bread(block 16643) failed
[  780.977382][T11703] FAT-fs (loop4): Directory bread(block 16644) failed
[  781.021204][T11703] FAT-fs (loop4): Directory bread(block 16645) failed
[  781.053257][T11703] FAT-fs (loop4): Directory bread(block 16646) failed
14:09:17 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000)

14:09:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xe}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xebffffff00000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001480240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  781.279586][T11727] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  781.288557][T11729] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  781.303580][T11736] loop4: detected capacity change from 0 to 6
[  781.307210][T11727] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x54100f)

[  781.322489][T11729] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  781.336148][T11737] qrtr: Invalid version 0
[  781.357252][T11736] FAT-fs (loop4): Directory bread(block 18435) failed
[  781.362153][T11737] qrtr: Invalid version 0
14:09:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x88, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6afd5ca74ffe"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r5], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r4, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  781.382411][T11736] FAT-fs (loop4): Directory bread(block 18436) failed
[  781.414234][T11736] FAT-fs (loop4): Directory bread(block 18437) failed
14:09:17 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x704982)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x100)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000080)=0xfffffffffffffffb)

[  781.453328][T11736] FAT-fs (loop4): Directory bread(block 18438) failed
14:09:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xfdfdffff00000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541010)

14:09:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280014c0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  781.643081][T11761] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  781.655078][T11761] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:17 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x10802)

[  781.703451][T11763] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  781.741033][T11781] loop4: detected capacity change from 0 to 6
14:09:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541011)

[  781.747880][T11763] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  781.796366][T11781] FAT-fs (loop4): Directory bread(block 19459) failed
[  781.817810][T11781] FAT-fs (loop4): Directory bread(block 19460) failed
14:09:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xfeffffff00000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  781.857775][T11781] FAT-fs (loop4): Directory bread(block 19461) failed
[  781.895526][T11781] FAT-fs (loop4): Directory bread(block 19462) failed
14:09:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x10}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541012)

14:09:17 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x0)
write$qrtrtun(r1, &(0x7f00000000c0)="b59ba4c6e9537c7de279576296dd979b5d691c7d68c6bd25e584d2ecd4880dbd52e532d8fbbb6396cf46a19e509d298b40f1b907b5687854b9d419cb7b151dcca3", 0x41)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r2, &(0x7f0000000140)="e2757cee2e58918e5ccb3361ba0dbf685df05926db6ed10a28aaca3372ed013c080d2acee55fb950103cec2bfdd1df4dc1ed59865662a94e5ad1753f7dcf50891e13533d6149f55c1110881e504400d216441f4e9229dfb5e706f9d5746b0f3ef2256f7edf2ea6a12476d7c127a1dbfcd1fd79024c541e87fb03395ee47a87c3886ad9ea86064ea2e7628f0eacd2856bc5ba0b35ceaba2908f6681d008003ced636c543f30bc36a5ae070d2aa5eb4ab0bed0fd41b90286d64c0ac597948acc886f93b7493cf6199b", 0xc8)
write$qrtrtun(r0, &(0x7f0000000040)="dc", 0x1)
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
sendfile(r3, r2, &(0x7f0000000240)=0x3, 0x8)

[  782.008900][T11803] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  782.120729][T11813] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xff00000000000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280015c0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:18 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1891c0)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080))
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x200140)
write$qrtrtun(r0, &(0x7f00000000c0)="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", 0x19)

14:09:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x11}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541018)

14:09:18 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x80000, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
recvmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1}, 0x40000021)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240))
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000008000300be4c9f5d9dd997827ab42abe2bb3107b17f1d115c010a0afd0c0c3832e9bf8c5e4dc9f11e733e713470ccfd9c53a57a1", @ANYRES32=r3, @ANYBLOB="359ea4da031edd324b70eb8b"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4600be44323d51c08b6bc67f6f6a0000", @ANYRES16, @ANYBLOB, @ANYRES32=r5], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044040)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r4, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  782.525867][T11847] loop4: detected capacity change from 0 to 6
[  782.590050][T11847] FAT-fs (loop4): Directory bread(block 23555) failed
[  782.622153][T11847] FAT-fs (loop4): Directory bread(block 23556) failed
14:09:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x12}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:18 executing program 5:
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r1, &(0x7f0000000040)="03212139", 0x400000)

[  782.687364][T11847] FAT-fs (loop4): Directory bread(block 23557) failed
[  782.710764][T11847] FAT-fs (loop4): Directory bread(block 23558) failed
14:09:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xffffffff00000000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541025)

14:09:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001600240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:18 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
write$qrtrtun(r0, &(0x7f0000000080)="75a5042e4caab1d3a35f944fcc894544b3b1a3b6527b2af5f56656f2156a109175b17cc2d1f85c59ff3974de9516dc4a73e7d5fe0416ae3afe908cf80508577d6ebeca7b885cbda970ba609c2cb4c47970b716ca9fda4b11ccdeee39e8ad6f0bdbb22961981cb84e0897aa5bd6ddba1b4040a574cea79b8620dc1ba5c657a56018e01615ca77715a178b0e6950209cf2f19b42fda5d1a72536588658", 0x9c)

14:09:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x14}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541041)

[  783.015255][T11908] loop4: detected capacity change from 0 to 6
[  783.027412][T11910] qrtr: Invalid version 117
14:09:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x2, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  783.063996][T11914] qrtr: Invalid version 117
[  783.082297][T11908] FAT-fs (loop4): Directory bread(block 24579) failed
[  783.128238][T11908] FAT-fs (loop4): Directory bread(block 24580) failed
[  783.158532][T11908] FAT-fs (loop4): Directory bread(block 24581) failed
14:09:19 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl(r2, 0x2, &(0x7f0000006e00)="705cab2a0203a965c52bf4383ff49e9b320c1aa69be23368c7d70c866a06be8b607730187c9ad0427910a0a498ad501e137b7974a1d37edada1772effc09e8d067c4803beae29b3894603bebe80c3ef29286db35ef9b609a15ca512039ba693626365af1b03e99016017d96e9693e70a00c548d8d6e7759143539d317ef068a46642d48aaab26c3ef8e73a44ecbc0983a97fa29d55843b08af0a87b922043a374d2e91476621a75dc95bd478a520ab3f7947f3fffeb44fc92cabd7a2c83630eccf87acb7fdddcfbf1b5fc1586369a020c5859ae508d925c3b3f804b690775e602424af830d9b6cc078c0abc800f65fcb25ef12161d")
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000000c0)={0x48b, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
close_range(r2, r3, 0x2)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  783.226724][T11908] FAT-fs (loop4): Directory bread(block 24582) failed
14:09:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x17}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001680240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x54105c)

14:09:19 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0)
write$qrtrtun(r1, &(0x7f0000000140)="03212139e16f8c4e26bcca73e3e885e7dafeb747011910033a927e8a0d786266214d5676f4aa7da51306336cd1b18e08fe9735b2ab3358c4e9d3f38f3bcf36341ac9fdb9b2e87e88c4b9869b33b12f72afd9db27223fb7f295c3b1e7f89dd7ac15940b9883c29a9bc88a3c7e4d060cee87e2cf4e39ace2f7e4f19612dee932330ac2a81e48a19bdd8086348588d11a56ff6680c2cccc5dff765c60056c95cfe02a6f13567ef35ac23c246cf6c0cc5a746a186cd2366ce9cbcfe636", 0xbb)
preadv(r1, &(0x7f0000001480)=[{&(0x7f0000001380)=""/138, 0x8a}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001780)=""/61, 0x3d}, {&(0x7f00000017c0)=""/201, 0xc9}], 0x4, 0x10fff, 0x800001)
r2 = syz_open_dev$vcsu(&(0x7f00000014c0), 0x1, 0x0)
r3 = socket$kcm(0x29, 0x1, 0x0)
preadv2(r3, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/106, 0x6a}, {&(0x7f0000003a00)=""/240, 0xf0}], 0x2, 0x0, 0x19e, 0xb)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000001700)={{'\x00', 0x3}, {0xc301}, 0x114, 0x0, 0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)="0cbe78fa599c72e8e2f359ded2c88c35fc53c5e5bba67f762b6eb7a55dc219d06592afea6f024915a3cb3ad6d680f54909e77a132f3abe8522316c6caf774e5ac9045923086f061880df5a65312b999254d6017073a78c5158a655bdf54e4ac0b3ee1350f1a42e7f6ae7501cc2936e1e895523eb45c360c537b3328bda1a", 0x7e, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="020000006a000000000000000c49000000842328ddac4cc187eb9a093aef0d23c3fbbadc47bc9c23432a2cc11f987e5391da0e4362b31336da0c7ddd110d4c1b1c6bb49645140000002e947d17765602545dfa9199c4e43e5df536c3506c000000a6017e68217a0dfdccb3f09e401638a76fb5e1c382376d1e1c536cbb420b6976474a34cadff61301e9be082a061a95361df91d677b2bf828c7f3b5be1f9242bb1ddcd731db4c743eed88e3bc10a344313e6d82998c07304aeb0eb5dc1de6fdfa09a5bbe3ef6a2bf973caad4e00"/218], 0xe2})
r4 = signalfd(r0, &(0x7f00000000c0)={[0xfeeb]}, 0x8)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000280)={{r4}, 0x0, 0x20, @inherit={0x58, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000200000000000000010000000000000004000000faff0000040000000000000004000000000000000900000000000000080000000000000004000000000000001f000000000000000500000000000000"]}, @devid})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000)
read$FUSE(r1, &(0x7f00000018c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ptrace$getregset(0x4204, r5, 0x3, &(0x7f0000000100)={&(0x7f0000003900)=""/213, 0xd5})
r6 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
sendfile(r1, r6, &(0x7f0000001280), 0x3)

14:09:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x3, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x18}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/135, 0x87, 0x3002, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x1, 0x3, 0x3}}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003480)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000003580)=0xe8)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000003740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003700)={&(0x7f00000007c0)={0x11c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x6000080}, 0x40000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  783.574058][T11966] loop4: detected capacity change from 0 to 6
[  783.640667][T11966] FAT-fs (loop4): Directory bread(block 26627) failed
14:09:19 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="bfeb32c64280225f18fe966c797b2226c07c134a1fbcdfc472fcbea7f1420640634851d5bf4e7ddca949a6ccd5e7aa468c71fd092bad8296ad27dc3e7c59cd900e044b2d91b65cf6a3598a0c2c506620c7969d866725a6fb43b7c3d354e4070d06d9449879d3902526fcf361361cec64c6a2f623518a0ed0130b7e6533c3c1d7d169f707c944180db73df6c50d8455504c8e6ef6916fb4710f7933bc96f355f030a9bbc1ecef465d000664ee26a52254d50d9b911aad4dc904c0a12d9c60af67c381c64ed24f963513ae68", 0xcb)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$qrtrtun(r1, &(0x7f00000001c0)=""/213, 0xd5)
fcntl$getown(r0, 0x9)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  783.685520][T11966] FAT-fs (loop4): Directory bread(block 26628) failed
[  783.721248][T11966] FAT-fs (loop4): Directory bread(block 26629) failed
14:09:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x542900)

[  783.759298][T11966] FAT-fs (loop4): Directory bread(block 26630) failed
14:09:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280016c0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x4, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x21}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  783.956915][T12014] loop4: detected capacity change from 0 to 6
14:09:19 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x295b2000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x0, 0x2})
preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x6, 0x8, 0x0)
write$qrtrtun(r1, &(0x7f0000000040)="0321f9090ebd7b220aee722139", 0xd)

[  784.020455][T12014] FAT-fs (loop4): Directory bread(block 27651) failed
14:09:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x54a000)

[  784.098318][T12014] FAT-fs (loop4): Directory bread(block 27652) failed
[  784.120143][T12014] FAT-fs (loop4): Directory bread(block 27653) failed
14:09:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x25}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  784.144888][T12014] FAT-fs (loop4): Directory bread(block 27654) failed
14:09:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x5, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001740240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:20 executing program 5:
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000a, 0x13, r1, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="01979ad4", 0xe03b3)

[  784.441629][T12070] loop4: detected capacity change from 0 to 6
[  784.480987][T12070] FAT-fs (loop4): Directory bread(block 29699) failed
[  784.489753][T12070] FAT-fs (loop4): Directory bread(block 29700) failed
[  784.496814][T12070] FAT-fs (loop4): Directory bread(block 29701) failed
[  784.517273][T12070] FAT-fs (loop4): Directory bread(block 29702) failed
14:09:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c8fdcb944e40ba39b8fc1423cfbd869221338a7b54d2f2879ab478b409d48a1d745d9ee8c26c1324c7dd70e1872754516588d860e83172437", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001020000000802110000000600000008021100000000000000b00500000100080211000000020000000000000a000600ffffffffffff000004005f000a00060050505050505000000a000600505050505050000004005f000600360003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x550000)

14:09:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x6, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:20 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r1, &(0x7f0000000080)="8bccffa8fb57bfdd93102adc8e3fd99c1f1f8cb997b90baa36b319a94102f0b312e6294c7eba40f7d1c3c3157db7e2fbfbf0aebc403bc2e262f2dd4036af852fb33e5b5d58b40b16847f43c9fc4928c58fd1c3539ab9a3c5a7e2bb14c0e80f199cdf25678ca8ddb01485e82e5a1daaaa78157dd467429beedcba4d1221cf9ce9dc313e80a0a14d67a7a394608ece4e7322c19539cfd2", 0x96)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001780240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  784.712253][T12086] loop4: detected capacity change from 0 to 6
[  784.767845][T12086] FAT-fs (loop4): Directory bread(block 30723) failed
[  784.801792][T12086] FAT-fs (loop4): Directory bread(block 30724) failed
14:09:20 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x4000], 0x0, 0xa3})
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
preadv(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1, 0x4, 0x4c8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  784.845033][T12086] FAT-fs (loop4): Directory bread(block 30725) failed
[  784.853555][T12086] FAT-fs (loop4): Directory bread(block 30726) failed
14:09:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001790240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x570000)

14:09:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x7, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x41}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  785.048209][T12130] loop4: detected capacity change from 0 to 6
[  785.100258][T12130] FAT-fs (loop4): Directory bread(block 30979) failed
14:09:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x970000)

[  785.144172][T12130] FAT-fs (loop4): Directory bread(block 30980) failed
[  785.171140][T12130] FAT-fs (loop4): Directory bread(block 30981) failed
[  785.196291][T12144] kvm_mmu_after_set_cpuid: 18 callbacks suppressed
[  785.196305][T12144] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  785.216872][T12145] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  785.227975][T12130] FAT-fs (loop4): Directory bread(block 30982) failed
14:09:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280017a0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:21 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x0)
sendfile(r0, r1, 0x0, 0x100)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x8, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x48}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:21 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
r5 = openat$incfs(r4, &(0x7f0000000040)='.log\x00', 0x303000, 0x21)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x8643}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5336}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4004)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x14ac000)

[  785.720780][T12190] loop4: detected capacity change from 0 to 6
[  785.738588][T12187] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  785.743161][T12185] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:21 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x190, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x1})
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x7a)
read$qrtrtun(r2, &(0x7f00000001c0)=""/124, 0x7c)

[  785.767693][T12187] kvm_mmu_after_set_cpuid: 18 callbacks suppressed
[  785.767707][T12187] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  785.786081][T12190] FAT-fs (loop4): Directory bread(block 31235) failed
[  785.803708][T12185] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  785.848338][T12190] FAT-fs (loop4): Directory bread(block 31236) failed
14:09:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0xff600000)

14:09:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x9, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  785.893140][T12190] FAT-fs (loop4): Directory bread(block 31237) failed
[  785.927008][T12190] FAT-fs (loop4): Directory bread(block 31238) failed
14:09:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280018a0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0xffff888000000000)

[  786.100485][T12224] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  786.152365][T12224] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  786.168094][T12228] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:22 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
write$qrtrtun(r0, &(0x7f0000000180)="539e97458a2527d86fa28ee9b8db9b6e6d24b3ecf999c35fe8f38819335e5c908be480b393f01becf04f90185b30457e3d7f576a201580baad6057d829214b1e0c533784e9011e96f03326a4e1d2a0596602604335718f9fc49d893eb33aafd0a638890411334c2061011f09ba190d96e22bb560c35a54641203a5781a0b10c2803890a125557b115237c7e881775170d3735bd45c18f1f71b85de723d149fe98566a9057721e195842e5aaefbd58c8955d72db3d6aedad9ac22c914f5907a1755bd9916a7ff4e5d80b0790a2b4944ab", 0xd0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4583, 0x7ff, 0x7fff, 0x3, 0x8}, &(0x7f00000012c0)=0x14)
write$qrtrtun(r0, &(0x7f0000000080)="8452530d0ecc35a6db8f81f1003ac8dcf70be883cfc091556bae4fdf581fccb4bff5e56076e195afd31a8e75a08ecdadafec09160f4cf28b3cec61a13025c2f68667c028298e5614b2e60350782ba89ec2022d89266f197123dbb5c0419eef56c7108675103d50a6e19cd97df3ec93533521222cb294f2122638828b08a6e837ee363884c67d16c31c8dceab1483c5f16554787da4cd532a7d900cf77e48858300d48ec05f6338a73d47f0686c77b56722690725881ceca1ca0ba9fbb22ef19e20c6e036c1915b92", 0xc8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
read$hidraw(r2, &(0x7f00000002c0)=""/4090, 0xffa)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x1180}}, 0x20008000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r4, &(0x7f0000000280)="000063c8f60d5776603600", 0xb)

[  786.214886][T12228] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  786.265566][T12242] loop4: detected capacity change from 0 to 6
14:09:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0xffffffffff600000)

14:09:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0xa, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  786.311128][T12242] FAT-fs (loop4): Directory bread(block 35331) failed
14:09:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  786.357330][T12242] FAT-fs (loop4): Directory bread(block 35332) failed
[  786.381543][T12242] FAT-fs (loop4): Directory bread(block 35333) failed
[  786.406847][T12242] FAT-fs (loop4): Directory bread(block 35334) failed
[  786.505619][T12260] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  786.521795][T12258] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  786.546699][T12260] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  786.560848][T12258] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000280018b0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:22 executing program 5:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44e100, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x3, 0x1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x31, 0x1, 0x5}, {0x200, 0x7f, 0xf3, 0xfa5}, {0x401, 0x2, 0xe2, 0x7}, {0x5, 0x3, 0x81, 0x2}, {0x2, 0x3, 0x8, 0x80000000}, {0x9, 0xe, 0x80, 0x3}, {0x3, 0x80, 0x91, 0x8}, {0x80b9, 0xff, 0xf9, 0x1}, {0x3c, 0x4, 0x60, 0x2a}]}, 0x3b)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r2, &(0x7f0000000040)="16217a1131d2", 0x6)

14:09:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x49101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x100, 0x2)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:09:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x60}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001020000000802110000000600000008021100000000000000b00502000100080211000000020000000000000a000600ffffffffffff000004005f000a00060050505050505000000a000600505000502250000004005f000600360003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES32], 0x4}, 0x1, 0x0, 0x0, 0x20000080}, 0xc010)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x200, 0x50}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  786.763687][T12285] loop4: detected capacity change from 0 to 6
14:09:22 executing program 5:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000080)="03210139", 0x4)

[  786.854541][T12285] FAT-fs (loop4): Directory bread(block 35587) failed
[  786.855924][T12299] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  786.892444][T12285] FAT-fs (loop4): Directory bread(block 35588) failed
14:09:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x1, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

[  786.918999][T12285] FAT-fs (loop4): Directory bread(block 35589) failed
[  786.945674][T12285] FAT-fs (loop4): Directory bread(block 35590) failed
[  786.950294][T12299] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:22 executing program 5:
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0xd2702000)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
write$qrtrtun(r0, &(0x7f0000000080)="726cfcb6b8860675b1d4235da9b1252cf9db2bef9b1eae6e5687d31294936af57cea8dfa4d823b9819f9417ded624de180c07a870c1e74a917a49b21d4f5a6003aeb3a076b21dca49144d2efdd0b5127c9c2340feae8e6191949514301d7499dabd3976ddc2b333a86a29074c30a25099082d30a791bf6aa28dd56fcf11df9bda94e50", 0x83)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001fe0240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0xd, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80282, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:09:23 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000180)="45fbdfad3a9f87b80009c4fcf5505a2ca4dfbcb5094edfc3e426cccb8823dfc50270b4588223a1847a3e23d41690b92bf88bdd237f563a821c5b203e87aca62d9b1b5c9f690547", 0x47)
write$qrtrtun(r0, &(0x7f0000000080)="76bb16074a7be591b2335c9406d94b146fe779581d66c7de9093bae6780325a5b41fe12b8ed8ee38bfcc66c31388c25fdac96fce079f11b429b9d852b239495d8880fc0a7ebd4ed5184833bba0775fb52347a662097a82253c0d04f59cbe0caf3d5373a86df17f08da9666ed4a81c72e0196983aa2b8cfae01fc7328d3c24d559398af7fe105d9f47e9109da287e0827914e01e69d6db8d73c61474d20fb5a3c6e14dd1308a93d0887e2efde66da3b9087de542ba16fd2301d69fad31e83dc2f8a3359f6b52cc694900b", 0xca)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

[  787.186320][T12325] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  787.208824][T12325] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  787.289937][T12341] loop4: detected capacity change from 0 to 6
[  787.296251][T12340] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x6c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  787.361638][T12341] FAT-fs (loop4): Directory bread(block 65027) failed
14:09:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0xf, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  787.413078][T12341] FAT-fs (loop4): Directory bread(block 65028) failed
[  787.433174][T12341] FAT-fs (loop4): Directory bread(block 65029) failed
[  787.491567][T12341] FAT-fs (loop4): Directory bread(block 65030) failed
[  787.551038][T12365] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:23 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40c000, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x5e9, 0x9e5, 0xdeb9, 0x3fe1]})
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:09:23 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
preadv(r1, &(0x7f0000000880)=[{&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/246, 0xf6}, {&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000740)=""/95, 0x5f}, {&(0x7f00000007c0)=""/188, 0xbc}], 0xa, 0xfffffffc, 0x75)
write$qrtrtun(r0, &(0x7f0000000040)="03212139", 0x400000)

14:09:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001000340000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x74}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x10, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a0072000303030303030a000600ffffffffffff000004005f000a00060050505050505000000a000600505050505050000002005f0006003600030000001d5a476c7fd8142a62bedc2b911841983d15d6ebf2dbebb56b78885c64c63d34213408e4250c830dd830570c4a04ffa54b60c48bf7199c76bdd70c77cabc61e847d54de7b775d22f9e7bea9b4c706d32c760056e091c048b1eb2d91a43e37730c3eb69eb940ae69ffe3abb0a08eadec7c9e9fbb83f99bc19336954509d4fd881e9ef66f218867780fd19fec01bcadd7e06eb5280"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/149, 0x95, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB="09662599c3c6b9960d7ccd66", @ANYRES16, @ANYBLOB, @ANYRES32=r2], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r1, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
splice(r3, &(0x7f0000000100)=0x5, r4, &(0x7f0000000180)=0x80000001, 0x1, 0x14)
sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x424, 0x3f3, 0xe08, 0x70bd27, 0x25dfdbfb, {0x1, 0x0, 0xd, [0x47, 0x2, 0x1, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xd9f9, 0xee37, 0x800, 0xefe, 0x80000001, 0xfffffff8, 0x1, 0xfffffff7, 0x9, 0x9b, 0xfffffff7, 0x20, 0x7, 0xd4, 0x5, 0x5, 0x8001, 0x1ff, 0x80000001, 0x65b, 0x4, 0x9, 0xa5, 0x3, 0x3b, 0x40, 0x10000, 0x1, 0x5, 0x2, 0x800, 0x20, 0x9, 0x99c, 0x1000, 0x9, 0x1, 0x5a, 0x6, 0x8, 0x5, 0x1002, 0x1000, 0x1, 0xf0, 0x80d, 0x4, 0x4, 0x7, 0x0, 0x3f, 0x7fffffff, 0x2, 0x401, 0x6, 0x3], [0x2, 0x5, 0x5, 0x7061a98a, 0x8, 0x101, 0x226c44b1, 0x3, 0x4, 0x2, 0x88, 0x3, 0xfffffff9, 0x1, 0x10001, 0xea, 0xc0, 0x3, 0x6, 0x1, 0x0, 0xfffff4d9, 0xb959, 0x3, 0x2, 0xfffffff8, 0x800, 0x101, 0x3ff, 0x4, 0x0, 0x8, 0x5, 0x7ff, 0x1f, 0x8, 0x4, 0x5, 0x5, 0x0, 0x7, 0x4, 0x1000, 0x3, 0x6, 0x200, 0x4, 0xfc00, 0x4, 0x9, 0x7, 0x4, 0x1, 0x53, 0x9, 0xfff, 0x1, 0xffff8000, 0x7f, 0x9, 0x5, 0x7, 0x2, 0x4e1], [0x871, 0xb0da, 0x404, 0x80000000, 0x9, 0x6, 0x80000001, 0x800, 0x1, 0x8, 0x4, 0x9, 0x1, 0xa79, 0x4, 0x8001, 0x0, 0xffffffff, 0x6, 0x8fe1, 0x3, 0x1, 0xffffffff, 0x9, 0x1, 0x8, 0x7ff, 0xfffffffd, 0x722f, 0x651, 0x20, 0x6, 0xff, 0x3f, 0x80, 0x9, 0x8, 0x4, 0x4, 0xffffffff, 0x7fffffff, 0x5, 0x6, 0xffffffff, 0xffffffff, 0x7fffffff, 0x9d, 0x57, 0x0, 0x8, 0x8, 0x6, 0xa5bf, 0xfffff800, 0xec, 0x1, 0x3, 0x8, 0x0, 0x7ff, 0x0, 0x4, 0x4, 0xcc], [0x8000, 0x800, 0x1, 0x7, 0x3, 0x8, 0x9, 0x0, 0x9, 0xffffffff, 0x200, 0x1, 0x101, 0x80, 0x9, 0x401, 0x5, 0x8001, 0x3, 0x9, 0x6, 0x400, 0x200, 0x9, 0x5, 0x7, 0x9, 0x7, 0x6d, 0xfffffff9, 0x3, 0x101, 0xee69, 0x2, 0xfff, 0x1, 0x8000, 0x0, 0x101, 0x9, 0x1, 0x5, 0x5, 0x8, 0xaa92, 0x1, 0xffffff80, 0x9, 0x1ff, 0x9, 0x345, 0x1, 0x77f, 0x337a, 0xfff, 0x100, 0x4, 0x7, 0x3, 0x100, 0xc101, 0x4, 0x0, 0x4], 0x1, ['\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x8000}, 0x4040880)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  787.770976][T12392] loop4: detected capacity change from 0 to 6
[  787.810501][T12392] FAT-fs (loop4): Directory bread(block 6) failed
14:09:23 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0x8004ae98, 0x541000)

[  787.842717][T12392] FAT-fs (loop4): Directory bread(block 7) failed
14:09:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001000540000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x1, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:09:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x7a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x12, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00002a8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="0f066436f30f5d9f61d90f32647faeba2100ed0f209366f3ae66b80500000066b9f34f00000f01d92ef30f1ef8baf80c66b87a3c768f66efbafc0cb8564def", 0x3f}], 0x1, 0x20, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1000}, @dstype3={0x7, 0xb}], 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xc000, 0x3000, 0xc, 0x0, 0xc1, 0x3d, 0xbe, 0x4, 0x8, 0x3f, 0x2, 0xbe}, {0x1000, 0x6000, 0xf, 0x0, 0x2, 0x9, 0x1f, 0xe0, 0x0, 0x7f, 0x1, 0x3}, {0x100000, 0xf000, 0xe, 0xfd, 0x5, 0x40, 0x5, 0x2, 0x7, 0x6, 0x0, 0x80}, {0x100000, 0xf000, 0x0, 0x7, 0x20, 0x44, 0x53, 0x0, 0x4, 0x81, 0xed, 0x8}, {0xd000, 0x5000, 0xf, 0x0, 0xf7, 0x3f, 0x9, 0x20, 0x0, 0x2, 0x3, 0x40}, {0x3002, 0x10000, 0xf, 0x49, 0x4, 0x9, 0x20, 0x52, 0x20, 0x7, 0x6, 0x8}, {0x3000, 0x0, 0x4, 0x1f, 0x4d, 0xb2, 0x8, 0x4, 0xf2, 0x8, 0x1, 0x80}, {0x1b000, 0x2, 0x9, 0x9, 0x4, 0x7, 0x0, 0x8a, 0x9, 0x6, 0xfd, 0x2}, {0x10000, 0x7ff}, {0x2, 0x8001}, 0x40020022, 0x0, 0x100000, 0x150040, 0xe, 0x1400, 0x1, [0x6, 0x3b, 0x1, 0x1f]})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000000))

[  788.126161][T12430] loop4: detected capacity change from 0 to 6
[  788.183066][T12430] FAT-fs (loop4): Directory bread(block 6) failed
[  788.223665][T12430] FAT-fs (loop4): Directory bread(block 7) failed
14:09:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541004)

14:09:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xc0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  788.266484][T12430] FAT-fs (loop4): Directory bread(block 8) failed
14:09:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x14, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  788.334679][T12430] FAT-fs (loop4): Directory bread(block 9) failed
14:09:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001000640000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x540a00)

[  788.654808][T12495] loop4: detected capacity change from 0 to 6
[  788.676576][T12495] FAT-fs (loop4): Directory bread(block 7) failed
[  788.696807][T12495] FAT-fs (loop4): Directory bread(block 8) failed
[  788.713008][T12495] FAT-fs (loop4): Directory bread(block 9) failed
[  788.736406][T12495] FAT-fs (loop4): Directory bread(block 10) failed
14:09:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x300}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:24 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000df2500000000", @ANYRES32=0x0, @ANYBLOB="0b0006000e000600010001000900010063616b6500000000090001007072696f000000000a0001006e6574656d0000000900010063616b65000000000c000100736b627072696f00"], 0x60}, 0x1, 0x0, 0x0, 0xc5}, 0x48084)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='{-+{\x00', 0x0, r2)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0x8004ae98, 0x541000)

14:09:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x17, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8090ae81, 0x541000)

14:09:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001000740000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="023cf7fbce0c8ea802426236690fd38858080000", @ANYRES16=0x0, @ANYBLOB="000425bd00000003000000000000009cfd00000a000600ffffffffffff00000a000600ffffffffffff0000060036006c0b00000a003400010111010101000004005f00000036000200"/82], 0x69}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="46040000c07c9d48285e5b597a0698ee910a22510f", @ANYRES16, @ANYBLOB="d83cb0b42fef9ed8c394aa432f6005c183", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000040))
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8090ae81, 0x541000)

14:09:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x500}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  789.036461][T12542] loop4: detected capacity change from 0 to 6
14:09:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x18, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  789.097136][T12542] FAT-fs (loop4): Directory bread(block 8) failed
[  789.132897][T12542] FAT-fs (loop4): Directory bread(block 9) failed
14:09:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r0, 0x85bdd000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x3, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x200, 0x8b})
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8a000, 0x0)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x1, r3})
r4 = signalfd(r0, &(0x7f0000000080)={[0x10000]}, 0x8)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000001c0)={0x1004, &(0x7f0000000140), 0x4, r5, 0x1})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0x8004ae98, 0x541000)

[  789.157457][T12542] FAT-fs (loop4): Directory bread(block 10) failed
[  789.200286][T12542] FAT-fs (loop4): Directory bread(block 11) failed
14:09:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x600}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8090ae81, 0x541000)

14:09:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001000a40000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x27, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x700}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  789.560282][T12610] loop4: detected capacity change from 0 to 6
14:09:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001000f40000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  789.597134][T12610] FAT-fs (loop4): Directory bread(block 11) failed
[  789.597176][T12610] FAT-fs (loop4): Directory bread(block 12) failed
[  789.597204][T12610] FAT-fs (loop4): Directory bread(block 13) failed
[  789.597230][T12610] FAT-fs (loop4): Directory bread(block 14) failed
14:09:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x80000001, 0x20, 0x0, [{0x3, 0x9, 0xff, '\x00', 0x10}, {0x80, 0x9f, 0x0, '\x00', 0x3}, {0x8, 0x0, 0x44, '\x00', 0x2}, {0x0, 0x53, 0x0, '\x00', 0x7}, {0x8, 0x9, 0x80, '\x00', 0x5e}, {0x3e, 0x2, 0x6, '\x00', 0x80}, {0xa, 0x1, 0x81, '\x00', 0x91}, {0x40, 0x81, 0xa0, '\x00', 0xd1}, {0x33, 0x81, 0xa3, '\x00', 0x9}, {0xff, 0x3f, 0x4, '\x00', 0x8}, {0x2, 0x81, 0x3, '\x00', 0x8}, {0xfb, 0x6, 0x20, '\x00', 0x4}, {0x0, 0x23, 0x20, '\x00', 0x25}, {0x1, 0x6, 0x40, '\x00', 0x9b}, {0x6, 0x5, 0x0, '\x00', 0xa1}, {0x2, 0x0, 0x8}, {0x6, 0x9, 0x6, '\x00', 0x80}, {0x4, 0x6, 0x8, '\x00', 0x6e}, {0x0, 0x0, 0x1, '\x00', 0x2}, {0x7, 0x9, 0xfc, '\x00', 0x86}, {0x80, 0x7f, 0xff, '\x00', 0x7}, {0x40, 0x6, 0x2b, '\x00', 0x7f}, {0x8, 0x0, 0x68, '\x00', 0xaa}, {0x7f, 0x2, 0x3f, '\x00', 0x4}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:09:25 executing program 5 (fault-call:4 fault-nth:0):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="012121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

14:09:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x2a, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  789.869925][T12642] loop4: detected capacity change from 0 to 6
14:09:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x900}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x62440, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0xdc, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_IE={0x7d, 0x2a, [@fast_bss_trans={0x37, 0x77, {0x20, 0x2, "c1138d3becf9b3b73434cbd28ca7ecce", "37783b04bdcd711818271408df996881d17fb1507fef942260cd8d2d8f0f7f56", "96f4da9a1ac5e9db7be4e5f02ae4311c1748bfc96a2d4e19261bb21c0ab6ca59", [{0x1, 0x16, "bc0a14664d84c17d016bd7cae7f4c79bc49bae770506"}, {0x4, 0xb, "7c4bf251677340207b0666"}]}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x10000, &(0x7f00000003c0)=@l2={0x1f, 0x6, @any, 0x0, 0x2}, 0x80)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="3b2ff5d8fc590300f553c13c413d1104ca539d65ecfc1d687b698f7fb9e97fbf1fda28b7", @ANYRES32=r5], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fcdbdb000000000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000180000029000000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20004800)
shutdown(r4, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

[  789.950030][T12642] FAT-fs (loop4): Directory bread(block 16) failed
[  789.965525][T12649] FAULT_INJECTION: forcing a failure.
[  789.965525][T12649] name failslab, interval 1, probability 0, space 0, times 0
[  789.974077][T12642] FAT-fs (loop4): Directory bread(block 17) failed
[  790.038413][T12642] FAT-fs (loop4): Directory bread(block 18) failed
[  790.061703][T12649] CPU: 1 PID: 12649 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  790.066860][T12642] FAT-fs (loop4): Directory bread(block 19) failed
[  790.070575][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  790.070591][T12649] Call Trace:
[  790.070601][T12649]  dump_stack_lvl+0x1d3/0x29f
[  790.070628][T12649]  ? show_regs_print_info+0x12/0x12
[  790.070647][T12649]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  790.070668][T12649]  ? __fs_reclaim_acquire+0x30/0x30
[  790.070688][T12649]  ? __might_sleep+0x100/0x100
[  790.070712][T12649]  should_fail+0x384/0x4b0
[  790.070734][T12649]  ? qrtr_tun_write_iter+0xbd/0x160
[  790.070754][T12649]  should_failslab+0x5/0x20
[  790.070773][T12649]  __kmalloc+0x89/0x390
[  790.070791][T12649]  ? iov_iter_fault_in_readable+0x430/0x430
[  790.070819][T12649]  qrtr_tun_write_iter+0xbd/0x160
[  790.070840][T12649]  vfs_write+0xa39/0xc90
[  790.070866][T12649]  ? file_end_write+0x230/0x230
[  790.070903][T12649]  ? __fdget_pos+0x1d8/0x2f0
[  790.070918][T12649]  ? ksys_write+0x72/0x2a0
[  790.070937][T12649]  ksys_write+0x171/0x2a0
[  790.070956][T12649]  ? __ia32_sys_read+0x80/0x80
[  790.070973][T12649]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  790.178464][T12649]  ? lockdep_hardirqs_on+0x8d/0x130
[  790.183786][T12649]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  790.189776][T12649]  do_syscall_64+0x3d/0xb0
[  790.194205][T12649]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  790.200106][T12649] RIP: 0033:0x4665e9
[  790.204004][T12649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  790.223620][T12649] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
14:09:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0xe8, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001011040000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  790.232040][T12649] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  790.236606][T12667] kvm_mmu_after_set_cpuid: 19 callbacks suppressed
[  790.236618][T12667] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  790.240010][T12649] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003
[  790.240027][T12649] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  790.240040][T12649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  790.240052][T12649] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
14:09:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

14:09:26 executing program 5 (fault-call:4 fault-nth:1):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="012121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

14:09:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xa00}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x500, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  790.536744][T12693] loop4: detected capacity change from 0 to 6
[  790.573455][T12695] FAULT_INJECTION: forcing a failure.
[  790.573455][T12695] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  790.600406][T12693] FAT-fs (loop4): Directory bread(block 273) failed
[  790.607912][T12693] FAT-fs (loop4): Directory bread(block 274) failed
[  790.627364][T12701] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  790.637435][T12695] CPU: 1 PID: 12695 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  790.646209][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  790.656257][T12695] Call Trace:
[  790.659529][T12695]  dump_stack_lvl+0x1d3/0x29f
[  790.664207][T12695]  ? show_regs_print_info+0x12/0x12
[  790.669394][T12695]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  790.675116][T12695]  ? __might_fault+0xb8/0x110
[  790.679781][T12695]  ? __lock_acquire+0x6100/0x6100
[  790.684896][T12695]  should_fail+0x384/0x4b0
[  790.689317][T12695]  _copy_from_iter+0x25b/0x1070
[  790.694174][T12695]  ? _copy_mc_to_iter+0x1470/0x1470
[  790.699370][T12695]  ? __virt_addr_valid+0x21b/0x2d0
[  790.704477][T12695]  ? __check_object_size+0x2f3/0x3f0
[  790.709758][T12695]  qrtr_tun_write_iter+0xe0/0x160
[  790.714774][T12695]  vfs_write+0xa39/0xc90
[  790.719013][T12695]  ? file_end_write+0x230/0x230
[  790.723869][T12695]  ? __fdget_pos+0x1d8/0x2f0
[  790.728448][T12695]  ? ksys_write+0x72/0x2a0
[  790.732853][T12695]  ksys_write+0x171/0x2a0
[  790.737174][T12695]  ? __ia32_sys_read+0x80/0x80
[  790.741929][T12695]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  790.747900][T12695]  ? lockdep_hardirqs_on+0x8d/0x130
[  790.753182][T12695]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  790.759170][T12695]  do_syscall_64+0x3d/0xb0
[  790.763662][T12695]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  790.769549][T12695] RIP: 0033:0x4665e9
[  790.773780][T12695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  790.793375][T12695] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  790.801782][T12695] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  790.809846][T12695] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003
[  790.817805][T12695] RBP: 00007f0eee3b91d0 R08: 0000000000000000 R09: 0000000000000000
[  790.825764][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  790.833721][T12695] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
14:09:26 executing program 0:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0xd4240, 0x0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x98, r0, 0x100, 0x70bd29, 0x2, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2901e460}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc4ed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98f9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xc054}, 0x800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x174, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87ee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc80a}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x767}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8791}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x76}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xee}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$KVM_RUN(0xffffffffffffffff, 0x8004ae98, 0x541000)

14:09:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x600, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  790.863349][T12693] FAT-fs (loop4): Directory bread(block 275) failed
[  790.888755][T12701] kvm_mmu_after_set_cpuid: 18 callbacks suppressed
[  790.888769][T12701] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  790.895380][T12693] FAT-fs (loop4): Directory bread(block 276) failed
14:09:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b440001070000000000000000000600000008021100000000000000b0050000010008021100000002000000000057557a82f7a1a99833000a890600ffff5f000a08060050505050505000002a000600505050505050002004005f0006003600030000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="f3666341ed1ac99366b3e3ffc6736b85302f7eed59a7d6f7b1c75a5b779528c90cd5055b13475bbb52ce077e4a447f9c07008a4d6d5f570880d1a3f7c0d53b4e3cc758d701e30d37f56dd5b8dc77d8ba9502dc8c674e755c", @ANYRES32=r3], 0x4}}, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={<r4=>0x0, 0x44, 0x1, [0x101, 0x2, 0xeab, 0xcd16], [0x5, 0x8, 0x1, 0x5, 0x6, 0x8, 0x0, 0x3, 0xf94, 0x80000000, 0x1, 0xa7, 0x1, 0x1, 0xaf6, 0xf4ff, 0x7, 0x4, 0x8, 0x1, 0x1, 0x3, 0xbef8, 0x1, 0x7, 0x0, 0x501e, 0x100000000, 0x1, 0x1, 0xffffffff, 0x80000000, 0x9, 0x401, 0x4, 0x80, 0x4, 0x9, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffff7f, 0x9, 0x7, 0x6, 0x3, 0x7fff, 0x400, 0x4, 0x0, 0x3, 0x2, 0xffffffff80000001, 0x7ff, 0xffffffff, 0x92, 0x5c0, 0x6, 0x7fffffff, 0x7ff, 0xfffffffffffffffd, 0x1, 0x5, 0x4, 0x1f, 0x4, 0xffffffff, 0x6, 0x9, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x37, 0x0, 0x0, 0xd7f, 0x8, 0x5, 0x1f, 0x2, 0x10000, 0x7ff, 0x1, 0x2b1, 0x80000000, 0x80000000, 0x5, 0xfffffffffffffff7, 0x1000, 0x5, 0x3, 0x18ec, 0xfff, 0x4, 0x602293aa, 0x20, 0xffffffffffffffc0, 0x1, 0xffffffffffffffff, 0x15da, 0x20, 0x5, 0x53, 0x3f, 0x542, 0x5, 0x98, 0x6, 0xffffffff, 0x9, 0x37c8, 0x5, 0x81, 0xfffffffffffffffa, 0x2, 0x8, 0xff, 0x6]})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001040)={r4, "46f8051d8a7de7379274550cde52f654"})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0xd3, 0x10}, 0x18)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xb00}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001001840000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  791.162772][T12721] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  791.201667][T12721] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:27 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x3e, 0xd, &(0x7f0000000100)="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"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0x8004ae98, 0x541000)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)

[  791.279247][T12740] loop4: detected capacity change from 0 to 6
[  791.304728][T12737] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x4000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  791.328656][T12737] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  791.337707][T12740] FAT-fs (loop4): Directory bread(block 25) failed
[  791.357311][T12740] FAT-fs (loop4): Directory bread(block 26) failed
[  791.381147][T12740] FAT-fs (loop4): Directory bread(block 27) failed
14:09:27 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="012121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

[  791.423219][T12740] FAT-fs (loop4): Directory bread(block 28) failed
[  791.462314][T12751] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xc00}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001002040000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2712, 0x2, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil})

[  791.530778][T12751] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
14:09:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0xc000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  791.670191][T12776] loop4: detected capacity change from 0 to 6
[  791.670322][T12771] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  791.704593][T12776] FAT-fs (loop4): Directory bread(block 33) failed
14:09:27 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="022121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

[  791.732301][T12771] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  791.768325][T12776] FAT-fs (loop4): Directory bread(block 34) failed
[  791.802494][T12776] FAT-fs (loop4): Directory bread(block 35) failed
[  791.827543][T12787] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  791.836938][T12776] FAT-fs (loop4): Directory bread(block 36) failed
14:09:27 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x111000, 0x1}, 0x18)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x80000000, 0x80, 0x0, 0x3, 0x3, 0x5, 0x20], 0x7, 0x80800, 0x0, <r1=>0xffffffffffffffff})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x55, 0x80000001, 0x101, 0x7b4, 0x4, 0x84f, 0x180000, 0x7, 0x0], 0x9, 0x80000, 0x0, <r3=>0xffffffffffffffff})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0x8004ae98, 0x541000)

[  791.852850][T12787] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  791.907534][T12796] qrtr: Invalid version 2
[  791.947962][T12801] qrtr: Invalid version 2
14:09:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001003f40000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xd00}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1a1e92, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:27 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0x8004ae98, 0x541000)

14:09:28 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="032121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

14:09:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000008000300", @ANYRES32=r2, @ANYBLOB="41002a00823b05bea0020000000802110000000010000006000000f896000003050802110000000300000001ffffffffffff0700000004080211000000090000000000000a00768260e0d04a0600ffffffffffff000004005f000a00060050505050505000180a000600505050505050000004005f0004005f00"], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000883)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x84}, 0x4000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  792.200626][T12815] loop4: detected capacity change from 0 to 6
14:09:28 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="042121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

[  792.255305][T12818] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  792.282405][T12815] FAT-fs (loop4): Directory bread(block 64) failed
[  792.284119][T12822] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
14:09:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3f, 0x1, 0x7f, 0x3f, 0x2, 0x6, 0x3, 0x2a7, 0x38, 0x31e, 0x48, 0x8000, 0x20, 0x2, 0x6, 0x8, 0x7fff}, [{0x7, 0x1, 0x8, 0x0, 0x4, 0x3, 0x2, 0x8d7}, {0x5, 0x9, 0x10001, 0x5, 0x3f, 0x43b, 0xbff2, 0x5}], "1571f5cef5eedc4d089d53c20c47f2e76dbbd55fc21a84404c63d4ac7d0f3617ec75f3b0f3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x69d)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x541000)

[  792.300824][T12818] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  792.303078][T12822] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  792.328336][T12815] FAT-fs (loop4): Directory bread(block 65) failed
[  792.380118][T12815] FAT-fs (loop4): Directory bread(block 66) failed
[  792.386776][T12815] FAT-fs (loop4): Directory bread(block 67) failed
[  792.405729][T12832] qrtr: Invalid version 4
[  792.436979][T12844] qrtr: Invalid version 4
14:09:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x40000000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001004040000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xe00}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:28 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="052121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

14:09:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000100)=""/47, 0x2f}], 0x2, 0x6, 0x4c02)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xf000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KVM_RUN(r3, 0x8004ae98, 0x541000)

[  792.627676][T12857] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  792.661372][T12859] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  792.677009][T12864] qrtr: Invalid version 5
[  792.682882][T12857] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  792.701799][T12867] loop4: detected capacity change from 0 to 6
[  792.707746][T12868] qrtr: Invalid version 5
[  792.751078][T12867] FAT-fs (loop4): Directory bread(block 65) failed
[  792.777839][T12867] FAT-fs (loop4): Directory bread(block 66) failed
14:09:28 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="062121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

[  792.795226][T12867] FAT-fs (loop4): Directory bread(block 67) failed
14:09:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0xf00}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  792.851660][T12867] FAT-fs (loop4): Directory bread(block 68) failed
14:09:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x40000001, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(r2, &(0x7f0000000040)='./file0\x00', 0x202, 0x5)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0x8004ae98, 0x541000)

[  792.966852][T12893] qrtr: Invalid version 6
[  792.990707][T12895] qrtr: Invalid version 6
14:09:29 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf252700000031002a00822b4400010200000008021100000006000000ea811100000000000000b00500000100080211000000020000000000000a000600ffffffffffff000004005f000a000600505050505050000022000600505050505050000004005f000600360003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000000c0)={0x216, 0x10, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0]})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001044040000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:29 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="072121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

14:09:29 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1100}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x80000006, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  793.283560][T12928] qrtr: Invalid version 7
[  793.285027][T12930] loop4: detected capacity change from 0 to 6
[  793.311900][T12931] qrtr: Invalid version 7
14:09:29 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="082121397baaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

[  793.380215][T12930] FAT-fs (loop4): Directory bread(block 1089) failed
[  793.389034][T12930] FAT-fs (loop4): Directory bread(block 1090) failed
[  793.422862][T12930] FAT-fs (loop4): Directory bread(block 1091) failed
[  793.438935][T12930] FAT-fs (loop4): Directory bread(block 1092) failed
14:09:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001006440000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x80000007, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

[  793.541765][T12952] qrtr: Invalid version 8
[  793.557704][T12954] qrtr: Invalid version 8
14:09:29 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$qrtrtun(r0, &(0x7f0000000040)="0121213904aaf000c19a886f0000065219568600000000000000ff7ffeffffff", 0x20)

14:09:29 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1200}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  793.687595][T12961] loop4: detected capacity change from 0 to 6
[  793.747549][T12961] FAT-fs (loop4): Directory bread(block 101) failed
[  793.758762][T12966] ==================================================================
[  793.767133][T12966] BUG: KASAN: slab-out-of-bounds in qrtr_endpoint_post+0x11ba/0x1340
[  793.775234][T12966] Read of size 4 at addr ffff8880238484ac by task syz-executor.5/12966
[  793.778163][T12961] FAT-fs (loop4): Directory bread(block 102) failed
[  793.783472][T12966] 
[  793.783505][T12966] CPU: 1 PID: 12966 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0
[  793.783525][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  793.783536][T12966] Call Trace:
[  793.783546][T12966]  dump_stack_lvl+0x1ae/0x29f
[  793.783574][T12966]  ? show_regs_print_info+0x12/0x12
[  793.783593][T12966]  ? printk+0xc0/0x108
[  793.783612][T12966]  ? wake_up_klogd+0xb2/0xf0
[  793.783630][T12966]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  793.783650][T12966]  ? _raw_spin_lock_irqsave+0xbf/0x100
[  793.783670][T12966]  ? _raw_spin_lock+0x40/0x40
[  793.783689][T12966]  print_address_description+0x66/0x3b0
[  793.783714][T12966]  kasan_report+0x163/0x210
[  793.783733][T12966]  ? qrtr_endpoint_post+0x11ba/0x1340
[  793.783759][T12966]  qrtr_endpoint_post+0x11ba/0x1340
[  793.869694][T12966]  qrtr_tun_write_iter+0x106/0x160
[  793.874829][T12966]  vfs_write+0xa39/0xc90
[  793.879073][T12966]  ? file_end_write+0x230/0x230
[  793.883943][T12966]  ? __fdget_pos+0x1d8/0x2f0
[  793.888521][T12966]  ? ksys_write+0x72/0x2a0
[  793.892927][T12966]  ksys_write+0x171/0x2a0
[  793.897246][T12966]  ? __ia32_sys_read+0x80/0x80
[  793.901995][T12966]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  793.907963][T12966]  ? lockdep_hardirqs_on+0x8d/0x130
[  793.913149][T12966]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  793.919147][T12966]  do_syscall_64+0x3d/0xb0
[  793.923570][T12966]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  793.929462][T12966] RIP: 0033:0x4665e9
[  793.933346][T12966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  793.952942][T12966] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  793.961369][T12966] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  793.969447][T12966] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003
[  793.977507][T12966] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[  793.985473][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[  793.993438][T12966] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
[  794.001418][T12966] 
[  794.003734][T12966] Allocated by task 12966:
[  794.008160][T12966]  ____kasan_kmalloc+0xc4/0xf0
[  794.013095][T12966]  __kmalloc+0xb4/0x390
[  794.017329][T12966]  qrtr_tun_write_iter+0xbd/0x160
[  794.022346][T12966]  vfs_write+0xa39/0xc90
[  794.026579][T12966]  ksys_write+0x171/0x2a0
[  794.030899][T12966]  do_syscall_64+0x3d/0xb0
[  794.035312][T12966]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  794.041195][T12966] 
[  794.043506][T12966] The buggy address belongs to the object at ffff888023848480
[  794.043506][T12966]  which belongs to the cache kmalloc-32 of size 32
[  794.057370][T12966] The buggy address is located 12 bytes to the right of
[  794.057370][T12966]  32-byte region [ffff888023848480, ffff8880238484a0)
[  794.070978][T12966] The buggy address belongs to the page:
[  794.076595][T12966] page:ffffea00008e1200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23848
[  794.086735][T12966] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  794.094298][T12966] raw: 00fff00000000200 ffffea0000ad21c0 0000001500000003 ffff888011041500
[  794.102873][T12966] raw: 0000000000000000 0000000080400040 00000001ffffffff 0000000000000000
[  794.111441][T12966] page dumped because: kasan: bad access detected
[  794.117838][T12966] page_owner tracks the page as allocated
[  794.123536][T12966] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 43, ts 9463888573, free_ts 9462558331
[  794.139320][T12966]  get_page_from_freelist+0x779/0xa30
[  794.144685][T12966]  __alloc_pages+0x26c/0x5f0
[  794.149262][T12966]  allocate_slab+0xf1/0x540
[  794.153773][T12966]  ___slab_alloc+0x1cf/0x350
[  794.158351][T12966]  __kmalloc+0x2e7/0x390
[  794.162584][T12966]  security_task_alloc+0x42/0x1e0
[  794.167595][T12966]  copy_process+0x16aa/0x5b00
[  794.172257][T12966]  kernel_clone+0x21a/0x7d0
[  794.176748][T12966]  kernel_thread+0x146/0x1c0
[  794.181324][T12966]  call_usermodehelper_exec_work+0x57/0x220
[  794.187211][T12966]  process_one_work+0x833/0x10c0
[  794.192137][T12966]  worker_thread+0xac1/0x1320
[  794.196802][T12966]  kthread+0x453/0x480
[  794.200926][T12966]  ret_from_fork+0x1f/0x30
[  794.205346][T12966] page last free stack trace:
[  794.210003][T12966]  free_pcp_prepare+0xc29/0xd20
[  794.214842][T12966]  free_unref_page+0x7e/0x550
[  794.219542][T12966]  __mmdrop+0xae/0x3f0
[  794.223600][T12966]  free_bprm+0x136/0x2f0
[  794.227959][T12966]  kernel_execve+0x740/0x9a0
[  794.232547][T12966]  call_usermodehelper_exec_async+0x262/0x3b0
[  794.238637][T12966]  ret_from_fork+0x1f/0x30
[  794.243075][T12966] 
[  794.245393][T12966] Memory state around the buggy address:
[  794.251011][T12966]  ffff888023848380: 00 00 01 fc fc fc fc fc 00 00 01 fc fc fc fc fc
[  794.259064][T12966]  ffff888023848400: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  794.267118][T12966] >ffff888023848480: 00 00 00 00 fc fc fc fc 00 00 01 fc fc fc fc fc
[  794.275168][T12966]                                   ^
[  794.280528][T12966]  ffff888023848500: 00 00 01 fc fc fc fc fc 00 00 01 fc fc fc fc fc
[  794.288575][T12966]  ffff888023848580: 00 00 01 fc fc fc fc fc 00 00 01 fc fc fc fc fc
14:09:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x640, 0x0)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000003640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r5=>0x0, <r6=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r6, 0x0, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r7]}, @devid})
preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)=""/1, 0x1}], 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r8=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRESOCT, @ANYRES32=r5, @ANYRESOCT=r5, @ANYRES64, @ANYRESHEX=r4], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000180)={"1c78761bf0049e4f66c020094a669e04", r7, 0x0, {0x6, 0x3}, {0x7, 0x1f}, 0x5, [0x101, 0x400, 0x9, 0x2, 0x1ff, 0xfff, 0x2, 0x1def, 0xb8, 0x8, 0x6, 0x9, 0x8, 0xffffffffffffff46, 0xfffffffffffffffa, 0x3]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000100)={{r2}, r7, 0x18, @unused=[0x1f, 0x0, 0x655, 0x2], @subvolid=0x5})
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_RUN(r11, 0x8004ae98, 0x541000)

[  794.296620][T12966] ==================================================================
[  794.304672][T12966] Disabling lock debugging due to kernel taint
14:09:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x80000008, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:30 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0x2}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffd}, 0xe)
shutdown(r2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1400}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

[  794.366828][T12961] FAT-fs (loop4): Directory bread(block 103) failed
[  794.393097][T12961] FAT-fs (loop4): Directory bread(block 104) failed
14:09:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001000400000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

14:09:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x8000000a, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)

14:09:30 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8018080}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x4, 0x1, 0x2, @device_a, 0x6, @device_a, 0x0, 0x5b0, 0x1, [{{}, @device_a, 0xfffffffe}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000083)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/135, 0x87, 0x40010126, &(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd34ce8f9995bf918}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
shutdown(r3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000004ab292c4f9b0d8125870fd99972cc477edc5d0c11269498bf6c8a074e9023be53bec50ea0d4fde27b20342b90e18bb1beae3358740887b5ab15938d50697b0061e91ad2d47e957a6f9266afd73fd86691d93c3545daf0543a98df35e57ed0f4745e11a0708ae7d7ddcf282a4b411f4daca8dc8742a354f82b263f907ac89d752f3bbb508fc9655ea40cff82e6cfe93261f813a54fef6ee3ebd55ed7eb34925d53bac8e178478061c86bcf55285a59aaf599052a343b", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250e000000200007800c000400080000000000000008000100000100000800020000100000"], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000)
r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048010}, 0x44080)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

14:09:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0, 0x1700}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x66000000)

14:09:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400028001000340000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

[  794.611207][T13022] loop4: detected capacity change from 0 to 6
14:09:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0x8004ae98, 0x541000)
r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x1e0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r4, 0x46467000)

[  794.715037][T12966] Kernel panic - not syncing: panic_on_warn set ...
[  794.721664][T12966] CPU: 0 PID: 12966 Comm: syz-executor.5 Tainted: G    B             5.14.0-rc3-syzkaller #0
[  794.731818][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  794.741894][T12966] Call Trace:
[  794.745174][T12966]  dump_stack_lvl+0x1ae/0x29f
[  794.749862][T12966]  ? show_regs_print_info+0x12/0x12
[  794.755078][T12966]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  794.760818][T12966]  ? preempt_schedule+0x14a/0x170
[  794.761064][T13049] loop4: detected capacity change from 0 to 6
[  794.765844][T12966]  ? schedule_preempt_disabled+0x20/0x20
[  794.765872][T12966]  panic+0x2e1/0x850
[  794.781427][T12966]  ? trace_hardirqs_on+0x30/0x80
[  794.786372][T12966]  ? nmi_panic+0x90/0x90
[  794.790628][T12966]  ? _raw_spin_unlock_irqrestore+0x110/0x120
[  794.796496][T13049] FAT-fs (loop4): Directory bread(block 6) failed
[  794.796657][T12966]  ? rcu_read_lock_sched_held+0x87/0x110
[  794.808729][T12966]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  794.811068][T13049] FAT-fs (loop4): Directory bread(block 7) failed
[  794.814717][T12966]  kasan_report+0x206/0x210
[  794.814742][T12966]  ? qrtr_endpoint_post+0x11ba/0x1340
[  794.814763][T12966]  qrtr_endpoint_post+0x11ba/0x1340
[  794.836166][T12966]  qrtr_tun_write_iter+0x106/0x160
[  794.841276][T12966]  vfs_write+0xa39/0xc90
[  794.845527][T12966]  ? file_end_write+0x230/0x230
[  794.850388][T12966]  ? __fdget_pos+0x1d8/0x2f0
[  794.854980][T12966]  ? ksys_write+0x72/0x2a0
[  794.859396][T12966]  ksys_write+0x171/0x2a0
[  794.863735][T12966]  ? __ia32_sys_read+0x80/0x80
[  794.868503][T12966]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  794.874489][T12966]  ? lockdep_hardirqs_on+0x8d/0x130
[  794.879693][T12966]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  794.885687][T12966]  do_syscall_64+0x3d/0xb0
[  794.890111][T12966]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  794.896015][T12966] RIP: 0033:0x4665e9
[  794.899913][T12966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  794.919534][T12966] RSP: 002b:00007f0eee3b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  794.927977][T12966] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  794.936097][T12966] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003
[  794.944076][T12966] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[  794.952055][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[  794.960039][T12966] R13: 00007ffe58d4a7cf R14: 00007f0eee3b9300 R15: 0000000000022000
[  794.969318][T12966] Kernel Offset: disabled
[  794.974160][T12966] Rebooting in 86400 seconds..