ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1243.558395] FAT-fs (loop2): Directory bread(block 128) failed [ 1243.576111] FAT-fs (loop2): Directory bread(block 129) failed [ 1243.593445] FAT-fs (loop2): Directory bread(block 130) failed 13:02:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000031, 0x0) 13:02:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1243.636433] FAT-fs (loop2): Directory bread(block 131) failed [ 1243.674329] FAT-fs (loop2): Directory bread(block 132) failed [ 1243.702937] FAT-fs (loop2): Directory bread(block 133) failed [ 1243.729199] FAT-fs (loop2): Directory bread(block 134) failed 13:02:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000fd, 0x0) 13:02:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1243.754570] FAT-fs (loop2): Directory bread(block 135) failed [ 1243.782078] FAT-fs (loop2): Directory bread(block 136) failed 13:02:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1243.804871] FAT-fs (loop2): Directory bread(block 137) failed [ 1243.837084] FAT-fs (loop0): Directory bread(block 128) failed 13:02:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1243.863037] FAT-fs (loop0): Directory bread(block 129) failed [ 1243.899462] FAT-fs (loop0): Directory bread(block 130) failed 13:02:31 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) [ 1243.930138] FAT-fs (loop0): Directory bread(block 131) failed [ 1243.939069] FAT-fs (loop0): Directory bread(block 132) failed [ 1243.970144] FAT-fs (loop0): Directory bread(block 133) failed 13:02:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000068, 0x0) [ 1243.995384] FAT-fs (loop0): Directory bread(block 134) failed [ 1244.012492] FAT-fs (loop0): Directory bread(block 135) failed [ 1244.012532] attempt to access beyond end of device [ 1244.023947] loop2: rw=2049, want=310, limit=128 [ 1244.039685] FAT-fs (loop0): Directory bread(block 136) failed [ 1244.057139] FAT-fs (loop0): Directory bread(block 137) failed [ 1244.081323] attempt to access beyond end of device [ 1244.086390] loop2: rw=2049, want=311, limit=128 [ 1244.118764] attempt to access beyond end of device [ 1244.124007] loop2: rw=2049, want=312, limit=128 [ 1244.132778] attempt to access beyond end of device [ 1244.138046] loop2: rw=2049, want=313, limit=128 [ 1244.144191] attempt to access beyond end of device [ 1244.149312] loop2: rw=2049, want=326, limit=128 [ 1244.154686] attempt to access beyond end of device [ 1244.159762] loop2: rw=2049, want=327, limit=128 [ 1244.182517] attempt to access beyond end of device [ 1244.187615] loop2: rw=2049, want=328, limit=128 [ 1244.203436] attempt to access beyond end of device [ 1244.208505] loop2: rw=2049, want=329, limit=128 [ 1244.226157] attempt to access beyond end of device [ 1244.231208] loop2: rw=2049, want=2153, limit=128 [ 1244.233944] attempt to access beyond end of device [ 1244.241011] loop0: rw=2049, want=310, limit=128 [ 1244.256465] attempt to access beyond end of device [ 1244.261497] loop0: rw=2049, want=311, limit=128 [ 1244.267633] attempt to access beyond end of device [ 1244.269729] attempt to access beyond end of device [ 1244.272693] loop0: rw=2049, want=312, limit=128 [ 1244.277658] loop2: rw=2049, want=2154, limit=128 [ 1244.300127] attempt to access beyond end of device [ 1244.305202] loop0: rw=2049, want=313, limit=128 [ 1244.320367] attempt to access beyond end of device [ 1244.325440] loop0: rw=2049, want=326, limit=128 [ 1244.334148] attempt to access beyond end of device [ 1244.339198] loop2: rw=2049, want=2154, limit=128 [ 1244.356129] attempt to access beyond end of device [ 1244.361202] loop0: rw=2049, want=327, limit=128 [ 1244.376137] attempt to access beyond end of device [ 1244.381176] loop0: rw=2049, want=328, limit=128 [ 1244.397110] attempt to access beyond end of device [ 1244.402171] loop0: rw=2049, want=329, limit=128 [ 1244.416561] attempt to access beyond end of device [ 1244.421597] loop0: rw=2049, want=2153, limit=128 [ 1244.513259] attempt to access beyond end of device [ 1244.518429] loop0: rw=2049, want=2154, limit=128 13:02:31 executing program 0 (fault-call:6 fault-nth:0): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b8, 0x0) 13:02:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x10000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:31 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffffffffffee5) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='\x00', r2) keyctl$read(0xb, r3, &(0x7f0000000140)=""/139, 0x8b) 13:02:31 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x25090000, 0xfffffffffffffffe}) 13:02:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:31 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x84) accept4(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80, 0x800) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) [ 1244.688829] FAT-fs (loop2): Directory bread(block 128) failed 13:02:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1244.729193] FAT-fs (loop2): Directory bread(block 129) failed [ 1244.744924] FAT-fs (loop2): Directory bread(block 130) failed [ 1244.751551] FAT-fs (loop2): Directory bread(block 131) failed [ 1244.764873] FAT-fs (loop2): Directory bread(block 132) failed 13:02:32 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:02:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000017, 0x0) [ 1244.792574] FAT-fs (loop2): Directory bread(block 133) failed 13:02:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1244.832979] FAT-fs (loop2): Directory bread(block 134) failed [ 1244.859137] FAT-fs (loop2): Directory bread(block 135) failed 13:02:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1244.886517] FAT-fs (loop2): Directory bread(block 136) failed [ 1244.904410] FAT-fs (loop2): Directory bread(block 137) failed 13:02:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000133, 0x0) [ 1245.080815] attempt to access beyond end of device [ 1245.085918] loop2: rw=2049, want=290, limit=128 [ 1245.106234] attempt to access beyond end of device [ 1245.111281] loop2: rw=2049, want=291, limit=128 [ 1245.127105] attempt to access beyond end of device [ 1245.132145] loop2: rw=2049, want=292, limit=128 [ 1245.148443] attempt to access beyond end of device [ 1245.153508] loop2: rw=2049, want=293, limit=128 [ 1245.170533] attempt to access beyond end of device [ 1245.175848] loop2: rw=2049, want=310, limit=128 [ 1245.192809] attempt to access beyond end of device [ 1245.197850] loop2: rw=2049, want=311, limit=128 [ 1245.213641] attempt to access beyond end of device [ 1245.218709] loop2: rw=2049, want=312, limit=128 [ 1245.235753] attempt to access beyond end of device [ 1245.240792] loop2: rw=2049, want=313, limit=128 [ 1245.248609] attempt to access beyond end of device [ 1245.253624] loop2: rw=2049, want=2157, limit=128 13:02:32 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ba, 0x0) 13:02:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x6, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:32 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x800, 0x7, 0x7f, 0x8}, &(0x7f0000000140)=0x98) write$P9_RSTATFS(r0, &(0x7f0000000280)={0x43, 0x9, 0x1, {0x4, 0x8, 0x4, 0x83e, 0x7, 0x24, 0x6, 0x7, 0x3}}, 0x43) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0x9, 0x30, 0xb23, 0x7}, &(0x7f00000001c0)=0x18) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:32 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x28020000, 0xfffffffffffffffe}) 13:02:32 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:02:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1245.737153] FAT-fs (loop2): Directory bread(block 128) failed [ 1245.779677] FAT-fs (loop2): Directory bread(block 129) failed 13:02:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ce, 0x0) 13:02:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1245.829668] FAT-fs (loop2): Directory bread(block 130) failed 13:02:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1245.869985] FAT-fs (loop2): Directory bread(block 131) failed [ 1245.898573] FAT-fs (loop2): Directory bread(block 132) failed 13:02:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000aa, 0x0) [ 1245.922656] FAT-fs (loop2): Directory bread(block 133) failed [ 1245.950399] FAT-fs (loop2): Directory bread(block 134) failed [ 1245.983847] FAT-fs (loop2): Directory bread(block 135) failed [ 1246.012126] FAT-fs (loop2): Directory bread(block 136) failed 13:02:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1246.036904] FAT-fs (loop2): Directory bread(block 137) failed 13:02:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1246.215330] attempt to access beyond end of device [ 1246.220366] loop2: rw=2049, want=310, limit=128 [ 1246.225088] buffer_io_error: 46 callbacks suppressed [ 1246.225099] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1246.260354] attempt to access beyond end of device [ 1246.265431] loop2: rw=2049, want=311, limit=128 [ 1246.270150] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1246.287943] attempt to access beyond end of device [ 1246.293036] loop2: rw=2049, want=312, limit=128 [ 1246.297741] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1246.314649] attempt to access beyond end of device [ 1246.319718] loop2: rw=2049, want=313, limit=128 [ 1246.324433] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1246.337836] attempt to access beyond end of device [ 1246.342897] loop2: rw=2049, want=326, limit=128 [ 1246.347617] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1246.365438] attempt to access beyond end of device [ 1246.370513] loop2: rw=2049, want=327, limit=128 [ 1246.375223] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1246.390831] attempt to access beyond end of device [ 1246.395907] loop2: rw=2049, want=328, limit=128 [ 1246.400650] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1246.408946] attempt to access beyond end of device [ 1246.413991] loop2: rw=2049, want=329, limit=128 [ 1246.418737] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1246.430644] attempt to access beyond end of device [ 1246.435681] loop2: rw=2049, want=2153, limit=128 [ 1246.458724] attempt to access beyond end of device [ 1246.463770] loop2: rw=2049, want=2154, limit=128 [ 1246.478058] attempt to access beyond end of device [ 1246.483080] loop2: rw=2049, want=2154, limit=128 13:02:34 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0xf, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000037, 0x0) 13:02:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:34 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xf5030000, 0xfffffffffffffffe}) 13:02:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xf, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:34 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4), 0x0, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:02:34 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xab3f) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00000000c0)) 13:02:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1246.737432] FAT-fs (loop2): Directory bread(block 128) failed [ 1246.766493] FAT-fs (loop2): Directory bread(block 129) failed 13:02:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007e, 0x0) [ 1246.786128] FAT-fs (loop2): Directory bread(block 130) failed 13:02:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1246.807977] FAT-fs (loop2): Directory bread(block 131) failed [ 1246.830826] FAT-fs (loop2): Directory bread(block 132) failed [ 1246.850460] FAT-fs (loop2): Directory bread(block 133) failed 13:02:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000119, 0x0) 13:02:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1246.873608] FAT-fs (loop2): Directory bread(block 134) failed [ 1246.897850] FAT-fs (loop2): Directory bread(block 135) failed [ 1246.922058] FAT-fs (loop2): Directory bread(block 136) failed 13:02:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1246.944950] FAT-fs (loop2): Directory bread(block 137) failed 13:02:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000f9, 0x0) [ 1247.067959] attempt to access beyond end of device [ 1247.073042] loop2: rw=2049, want=310, limit=128 [ 1247.077743] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1247.120952] attempt to access beyond end of device [ 1247.126045] loop2: rw=2049, want=311, limit=128 [ 1247.130752] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1247.173648] attempt to access beyond end of device [ 1247.178697] loop2: rw=2049, want=312, limit=128 [ 1247.200863] attempt to access beyond end of device [ 1247.205920] loop2: rw=2049, want=313, limit=128 [ 1247.222840] attempt to access beyond end of device [ 1247.227908] loop2: rw=2049, want=326, limit=128 [ 1247.233905] attempt to access beyond end of device [ 1247.238939] loop2: rw=2049, want=327, limit=128 [ 1247.244220] attempt to access beyond end of device [ 1247.249283] loop2: rw=2049, want=328, limit=128 [ 1247.254578] attempt to access beyond end of device [ 1247.259666] loop2: rw=2049, want=329, limit=128 [ 1247.266843] attempt to access beyond end of device [ 1247.271895] loop2: rw=2049, want=2153, limit=128 [ 1247.286627] attempt to access beyond end of device [ 1247.291671] loop2: rw=2049, want=2154, limit=128 [ 1247.327426] attempt to access beyond end of device [ 1247.332517] loop2: rw=2049, want=2154, limit=128 13:02:35 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0xfffffffc, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000072, 0x0) 13:02:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x600000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:35 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x40) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x101080) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1f30) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:35 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0x0, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:02:35 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x4306, 0xfffffffffffffffe}) [ 1247.776376] FAT-fs (loop2): Directory bread(block 128) failed [ 1247.808844] FAT-fs (loop2): Directory bread(block 129) failed 13:02:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1247.824779] device bridge_slave_1 left promiscuous mode [ 1247.830540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.839475] FAT-fs (loop2): Directory bread(block 130) failed 13:02:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000dd, 0x0) 13:02:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1247.879776] FAT-fs (loop2): Directory bread(block 131) failed [ 1247.887839] device bridge_slave_0 left promiscuous mode [ 1247.893397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.903446] FAT-fs (loop2): Directory bread(block 132) failed [ 1247.942207] FAT-fs (loop2): Directory bread(block 133) failed [ 1247.967050] FAT-fs (loop2): Directory bread(block 134) failed [ 1247.985173] FAT-fs (loop2): Directory bread(block 135) failed 13:02:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1248.000401] FAT-fs (loop2): Directory bread(block 136) failed [ 1248.022372] team0 (unregistering): Port device team_slave_1 removed [ 1248.041960] FAT-fs (loop2): Directory bread(block 137) failed 13:02:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1248.059586] team0 (unregistering): Port device team_slave_0 removed [ 1248.091513] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1248.123984] bond0 (unregistering): Releasing backup interface bond_slave_0 13:02:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1248.203674] bond0 (unregistering): Released all slaves [ 1248.231001] attempt to access beyond end of device [ 1248.236136] loop2: rw=2049, want=310, limit=128 13:02:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1248.275427] attempt to access beyond end of device [ 1248.280471] loop2: rw=2049, want=311, limit=128 [ 1248.309506] attempt to access beyond end of device [ 1248.314581] loop2: rw=2049, want=312, limit=128 [ 1248.364142] attempt to access beyond end of device [ 1248.369214] loop2: rw=2049, want=313, limit=128 [ 1248.412099] attempt to access beyond end of device [ 1248.417170] loop2: rw=2049, want=326, limit=128 [ 1248.433152] attempt to access beyond end of device [ 1248.438174] loop2: rw=2049, want=327, limit=128 [ 1248.489560] attempt to access beyond end of device [ 1248.494589] loop2: rw=2049, want=328, limit=128 [ 1248.539588] attempt to access beyond end of device [ 1248.544675] loop2: rw=2049, want=329, limit=128 [ 1248.557694] attempt to access beyond end of device [ 1248.562733] loop2: rw=2049, want=2153, limit=128 13:02:35 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1400, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c1, 0x0) 13:02:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1248.610619] attempt to access beyond end of device [ 1248.615754] loop2: rw=2049, want=2154, limit=128 [ 1248.666329] attempt to access beyond end of device [ 1248.671352] loop2: rw=2049, want=2154, limit=128 13:02:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xf60f0000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1248.834702] FAT-fs (loop2): Directory bread(block 128) failed [ 1248.847259] FAT-fs (loop2): Directory bread(block 129) failed [ 1248.861963] FAT-fs (loop2): Directory bread(block 130) failed [ 1248.876107] FAT-fs (loop2): Directory bread(block 131) failed [ 1248.891073] FAT-fs (loop2): Directory bread(block 132) failed [ 1248.900101] FAT-fs (loop2): Directory bread(block 133) failed [ 1248.918073] FAT-fs (loop2): Directory bread(block 134) failed [ 1248.927094] FAT-fs (loop2): Directory bread(block 135) failed [ 1248.940210] FAT-fs (loop2): Directory bread(block 136) failed [ 1248.948080] FAT-fs (loop2): Directory bread(block 137) failed [ 1249.036957] attempt to access beyond end of device [ 1249.041981] loop2: rw=2049, want=310, limit=128 [ 1249.058941] attempt to access beyond end of device [ 1249.063954] loop2: rw=2049, want=311, limit=128 [ 1249.069090] attempt to access beyond end of device [ 1249.074109] loop2: rw=2049, want=312, limit=128 [ 1249.079372] attempt to access beyond end of device [ 1249.084352] loop2: rw=2049, want=313, limit=128 [ 1249.089717] attempt to access beyond end of device [ 1249.094691] loop2: rw=2049, want=326, limit=128 [ 1249.099743] attempt to access beyond end of device [ 1249.104716] loop2: rw=2049, want=327, limit=128 [ 1249.109763] attempt to access beyond end of device [ 1249.114743] loop2: rw=2049, want=328, limit=128 [ 1249.119873] attempt to access beyond end of device [ 1249.125626] loop2: rw=2049, want=329, limit=128 [ 1249.132196] attempt to access beyond end of device [ 1249.137179] loop2: rw=2049, want=2153, limit=128 [ 1249.154606] attempt to access beyond end of device [ 1249.159618] loop2: rw=2049, want=2154, limit=128 [ 1249.170210] attempt to access beyond end of device [ 1249.175226] loop2: rw=2049, want=2154, limit=128 [ 1249.735556] IPVS: ftp: loaded support on port[0] = 21 [ 1250.214736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.221207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.228323] device bridge_slave_0 entered promiscuous mode [ 1250.259884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.266323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.274823] device bridge_slave_1 entered promiscuous mode [ 1250.305756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1250.336324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1250.425739] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1250.459287] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1250.597785] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1250.606874] team0: Port device team_slave_0 added [ 1250.638142] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1250.645770] team0: Port device team_slave_1 added [ 1250.675539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1250.708205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1250.742345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1250.775382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1251.089847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.096266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.102914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.109279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.117378] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1252.128310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1252.242850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.354996] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1252.464405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1252.470796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1252.485091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1252.590263] 8021q: adding VLAN 0 to HW filter on device team0 13:02:40 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB="24832c7fe2b5e22099698cbc132c9a39482d78961ac2bd39f243cd7f0105beaf9244390e4da61c5b9ecb4e9b8a1c0cd82e571ea5525b478f69083faed663760424a3dc", @ANYRES16=r0, @ANYRES32=r0]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:40 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0x0, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:02:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000057, 0x0) 13:02:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:40 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x3e040000, 0xfffffffffffffffe}) 13:02:40 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x8}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xf00000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1253.536135] FAT-fs (loop2): Directory bread(block 128) failed [ 1253.548762] FAT-fs (loop2): Directory bread(block 129) failed [ 1253.561371] FAT-fs (loop2): Directory bread(block 130) failed [ 1253.577450] FAT-fs (loop2): Directory bread(block 131) failed 13:02:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000149, 0x0) [ 1253.596199] FAT-fs (loop2): Directory bread(block 132) failed [ 1253.613302] FAT-fs (loop2): Directory bread(block 133) failed [ 1253.635785] FAT-fs (loop2): Directory bread(block 134) failed 13:02:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1253.651719] FAT-fs (loop2): Directory bread(block 135) failed [ 1253.667733] FAT-fs (loop2): Directory bread(block 136) failed [ 1253.685922] FAT-fs (loop2): Directory bread(block 137) failed 13:02:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c0, 0x0) [ 1253.845389] attempt to access beyond end of device [ 1253.850629] loop2: rw=2049, want=310, limit=128 [ 1253.855359] buffer_io_error: 22 callbacks suppressed [ 1253.855374] Buffer I/O error on dev loop2, logical block 309, lost async page write 13:02:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1253.942993] attempt to access beyond end of device [ 1253.948090] loop2: rw=2049, want=311, limit=128 [ 1253.952803] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1254.006161] attempt to access beyond end of device [ 1254.011441] loop2: rw=2049, want=312, limit=128 [ 1254.016157] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1254.058105] attempt to access beyond end of device [ 1254.063407] loop2: rw=2049, want=313, limit=128 [ 1254.068247] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1254.123545] attempt to access beyond end of device [ 1254.128819] loop2: rw=2049, want=326, limit=128 [ 1254.133537] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1254.143426] attempt to access beyond end of device [ 1254.148888] loop2: rw=2049, want=327, limit=128 [ 1254.153603] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1254.162121] attempt to access beyond end of device [ 1254.167218] loop2: rw=2049, want=328, limit=128 [ 1254.171937] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1254.180338] attempt to access beyond end of device [ 1254.185347] loop2: rw=2049, want=329, limit=128 [ 1254.190581] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1254.200998] attempt to access beyond end of device [ 1254.206054] loop2: rw=2049, want=2153, limit=128 [ 1254.224374] attempt to access beyond end of device [ 1254.229447] loop2: rw=2049, want=2154, limit=128 [ 1254.251092] attempt to access beyond end of device [ 1254.256247] loop2: rw=2049, want=2154, limit=128 13:02:41 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 13:02:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000004f, 0x0) 13:02:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x700000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:41 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x7f07, 0xfffffffffffffffe}) 13:02:41 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0x0, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:02:41 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x800000000000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1254.497474] FAT-fs (loop2): Directory bread(block 128) failed [ 1254.520430] FAT-fs (loop2): Directory bread(block 129) failed 13:02:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000066, 0x0) [ 1254.544356] FAT-fs (loop2): Directory bread(block 130) failed [ 1254.562682] FAT-fs (loop2): Directory bread(block 131) failed [ 1254.583380] FAT-fs (loop2): Directory bread(block 132) failed 13:02:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1254.607066] FAT-fs (loop2): Directory bread(block 133) failed [ 1254.630430] FAT-fs (loop2): Directory bread(block 134) failed 13:02:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000132, 0x0) [ 1254.652890] FAT-fs (loop2): Directory bread(block 135) failed [ 1254.669816] FAT-fs (loop2): Directory bread(block 136) failed [ 1254.690552] FAT-fs (loop2): Directory bread(block 137) failed 13:02:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1254.835327] attempt to access beyond end of device [ 1254.840453] loop2: rw=2049, want=310, limit=128 [ 1254.845197] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1254.897149] attempt to access beyond end of device [ 1254.902264] loop2: rw=2049, want=311, limit=128 [ 1254.907114] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1254.955160] attempt to access beyond end of device [ 1254.960280] loop2: rw=2049, want=312, limit=128 [ 1254.976171] attempt to access beyond end of device [ 1254.981565] loop2: rw=2049, want=313, limit=128 [ 1254.998935] attempt to access beyond end of device [ 1255.004043] loop2: rw=2049, want=326, limit=128 [ 1255.020009] attempt to access beyond end of device [ 1255.025123] loop2: rw=2049, want=327, limit=128 [ 1255.052084] attempt to access beyond end of device [ 1255.057282] loop2: rw=2049, want=328, limit=128 [ 1255.080634] attempt to access beyond end of device [ 1255.085719] loop2: rw=2049, want=329, limit=128 [ 1255.108657] attempt to access beyond end of device [ 1255.113841] loop2: rw=2049, want=2153, limit=128 [ 1255.141960] attempt to access beyond end of device [ 1255.147094] loop2: rw=2049, want=2154, limit=128 [ 1255.157131] attempt to access beyond end of device [ 1255.162225] loop2: rw=2049, want=2154, limit=128 13:02:42 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='threaded\x00', 0xfffffffffffffffa) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="807871b99dff4ac0fd4be4751146626c6eb330019b2ea9a957960ced7dae69397ee33cb6d88739a5cd3a4331015989f3826de86d65ea8561c9e49644bb44af478b5bf36dc3df665202c72cbf0632ffffb67923fa0e1a9f73b20d1ce308b56415e7f2846a072961fbaddbe841a33c9db43b96d67bc9bf972e019c567154df25aaa63e494e630ea3150bda7f98d9778edecf77232e450689faa3d517e15efb87cbac500f516bb0dea4a5ad768d14665004637245f4eec0cfe666b67ffa5e19d8052624deee356bf533bb23db765ce93ea48ecde7fdbf9de2325da49f83d3579104f97d86934bcb5e91e3a1d7a8", 0xec, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000180)=[{&(0x7f0000000140)="4f8b9012fd1e25ee25ef67c58c64a0a84230873fbcb64b4999e18e5b911ad5d16c402156842476e7d5ef", 0x2a}], 0x1, r2) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d8, 0x0) 13:02:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x7400, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1255.443044] FAT-fs (loop2): Directory bread(block 128) failed [ 1255.470994] FAT-fs (loop2): Directory bread(block 129) failed 13:02:42 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x32, 0xfffffffffffffffe}) 13:02:42 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000021ff4)={0x2001}) [ 1255.493323] FAT-fs (loop2): Directory bread(block 130) failed [ 1255.505468] FAT-fs (loop2): Directory bread(block 131) failed [ 1255.511854] FAT-fs (loop2): Directory bread(block 132) failed [ 1255.518079] FAT-fs (loop2): Directory bread(block 133) failed [ 1255.524357] FAT-fs (loop2): Directory bread(block 134) failed [ 1255.541086] FAT-fs (loop2): Directory bread(block 135) failed 13:02:42 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x1000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d3, 0x0) 13:02:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1255.564421] FAT-fs (loop2): Directory bread(block 136) failed [ 1255.591142] FAT-fs (loop2): Directory bread(block 137) failed 13:02:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000bf, 0x0) 13:02:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1255.780509] attempt to access beyond end of device [ 1255.785854] loop2: rw=2049, want=310, limit=128 [ 1255.819326] attempt to access beyond end of device [ 1255.824454] loop2: rw=2049, want=311, limit=128 [ 1255.862207] attempt to access beyond end of device [ 1255.867300] loop2: rw=2049, want=312, limit=128 [ 1255.902141] attempt to access beyond end of device [ 1255.907593] loop2: rw=2049, want=313, limit=128 [ 1255.935232] attempt to access beyond end of device [ 1255.940369] loop2: rw=2049, want=326, limit=128 [ 1255.956225] attempt to access beyond end of device [ 1255.961319] loop2: rw=2049, want=327, limit=128 [ 1255.976071] attempt to access beyond end of device [ 1255.981136] loop2: rw=2049, want=328, limit=128 [ 1256.004131] attempt to access beyond end of device [ 1256.009340] loop2: rw=2049, want=329, limit=128 [ 1256.027132] attempt to access beyond end of device [ 1256.032194] loop2: rw=2049, want=2153, limit=128 [ 1256.058634] attempt to access beyond end of device [ 1256.063686] loop2: rw=2049, want=2154, limit=128 [ 1256.089887] attempt to access beyond end of device [ 1256.094951] loop2: rw=2049, want=2154, limit=128 13:02:43 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) readahead(r0, 0x6, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0xa9e, "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", 0x36, 0x3, 0x40, 0x0, 0xd0, 0x6, 0x3, 0x1}, r2}}, 0x128) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000014, 0x0) 13:02:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x60, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1256.348297] FAT-fs (loop2): Directory bread(block 128) failed [ 1256.364140] FAT-fs (loop2): Directory bread(block 129) failed [ 1256.386115] FAT-fs (loop2): Directory bread(block 130) failed [ 1256.400579] FAT-fs (loop2): Directory bread(block 131) failed [ 1256.419891] FAT-fs (loop2): Directory bread(block 132) failed [ 1256.435261] FAT-fs (loop2): Directory bread(block 133) failed 13:02:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:43 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x79b, 0xfffffffffffffffe}) 13:02:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000000d, 0x0) [ 1256.455303] FAT-fs (loop2): Directory bread(block 134) failed [ 1256.480246] FAT-fs (loop2): Directory bread(block 135) failed [ 1256.505235] FAT-fs (loop2): Directory bread(block 136) failed [ 1256.523139] FAT-fs (loop2): Directory bread(block 137) failed 13:02:43 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0xffffffff00000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:43 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:02:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000be, 0x0) 13:02:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1256.679543] attempt to access beyond end of device [ 1256.684595] loop2: rw=2049, want=310, limit=128 13:02:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000052, 0x0) [ 1256.726700] attempt to access beyond end of device [ 1256.731821] loop2: rw=2049, want=311, limit=128 [ 1256.781073] attempt to access beyond end of device [ 1256.786112] loop2: rw=2049, want=312, limit=128 [ 1256.823081] attempt to access beyond end of device [ 1256.828146] loop2: rw=2049, want=313, limit=128 [ 1256.847093] attempt to access beyond end of device [ 1256.852201] loop2: rw=2049, want=326, limit=128 [ 1256.866370] attempt to access beyond end of device [ 1256.871441] loop2: rw=2049, want=327, limit=128 [ 1256.894945] attempt to access beyond end of device [ 1256.900065] loop2: rw=2049, want=328, limit=128 [ 1256.917932] attempt to access beyond end of device [ 1256.923015] loop2: rw=2049, want=329, limit=128 [ 1256.941450] attempt to access beyond end of device [ 1256.946514] loop2: rw=2049, want=2153, limit=128 [ 1256.969131] attempt to access beyond end of device [ 1256.974185] loop2: rw=2049, want=2154, limit=128 [ 1256.996137] attempt to access beyond end of device [ 1257.001218] loop2: rw=2049, want=2154, limit=128 13:02:44 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e5, 0x0) 13:02:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xe00, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1257.213923] FAT-fs (loop2): Directory bread(block 128) failed [ 1257.236710] FAT-fs (loop2): Directory bread(block 129) failed [ 1257.260799] FAT-fs (loop2): Directory bread(block 130) failed 13:02:44 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x2ea, 0xfffffffffffffffe}) 13:02:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1257.285290] FAT-fs (loop2): Directory bread(block 131) failed [ 1257.316347] FAT-fs (loop2): Directory bread(block 132) failed [ 1257.329229] FAT-fs (loop2): Directory bread(block 133) failed [ 1257.351112] FAT-fs (loop2): Directory bread(block 134) failed [ 1257.370274] FAT-fs (loop2): Directory bread(block 135) failed [ 1257.385218] FAT-fs (loop2): Directory bread(block 136) failed [ 1257.398997] FAT-fs (loop2): Directory bread(block 137) failed [ 1257.509722] attempt to access beyond end of device [ 1257.514788] loop2: rw=2049, want=310, limit=128 [ 1257.531669] attempt to access beyond end of device [ 1257.536711] loop2: rw=2049, want=311, limit=128 [ 1257.553912] attempt to access beyond end of device [ 1257.558967] loop2: rw=2049, want=312, limit=128 [ 1257.578969] attempt to access beyond end of device [ 1257.584095] loop2: rw=2049, want=313, limit=128 [ 1257.602006] attempt to access beyond end of device 13:02:44 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x3f00000000000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000010b, 0x0) 13:02:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:44 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000021ff4)={0x2001}) [ 1257.607064] loop2: rw=2049, want=326, limit=128 [ 1257.615150] attempt to access beyond end of device [ 1257.620161] loop2: rw=2049, want=327, limit=128 [ 1257.633612] attempt to access beyond end of device [ 1257.638712] loop2: rw=2049, want=328, limit=128 [ 1257.650523] attempt to access beyond end of device [ 1257.655559] loop2: rw=2049, want=329, limit=128 13:02:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1257.704813] attempt to access beyond end of device [ 1257.709887] loop2: rw=2049, want=2153, limit=128 13:02:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000f3, 0x0) [ 1257.765812] attempt to access beyond end of device [ 1257.770891] loop2: rw=2049, want=2154, limit=128 [ 1257.805295] attempt to access beyond end of device [ 1257.810413] loop2: rw=2049, want=2154, limit=128 13:02:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x8000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:45 executing program 4: r0 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/231) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, [0x0, 0x1, 0x401, 0x3cf8000000000, 0x3f, 0x3, 0x8, 0x5, 0x0, 0x2c, 0x2, 0xffffffffffff0001, 0x9, 0x1, 0x9]}, &(0x7f00000006c0)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000700)={r2, 0x3, "44d691"}, &(0x7f0000000740)=0xb) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) r6 = gettid() r7 = semget(0x0, 0x2, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000780)={r3, 0x0, 0x7fff}, 0x8) semctl$SEM_INFO(r7, 0x3, 0x13, &(0x7f00000004c0)=""/115) setpgid(r5, r6) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xac, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x27a, @ipv4={[], [0xff, 0xff]}, 0x6}, @in6={0xa, 0x4e20, 0x800, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x6}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}, 0x3}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x8, @empty, 0x1f}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000400)=0x1, 0x4) open_by_handle_at(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7000000003000000376417da484a7d9c3e1ec0e11b28a2cd7011135fe94f0f5960a675b05c749bb324a95aa0e20e739f52da9de8b5c85e65abd14a5a50b1746fe3a3da25de8e00000000010000006b4c97ef96e06338594853c06ca7b433541410a55c816f010a1fdae19910c9c24f4f"], 0x40800) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r8, 0xde00}, &(0x7f0000000200)=0x8) 13:02:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000139, 0x0) 13:02:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1257.991650] FAT-fs (loop2): Directory bread(block 128) failed [ 1258.018252] FAT-fs (loop2): Directory bread(block 129) failed [ 1258.036477] FAT-fs (loop2): Directory bread(block 130) failed [ 1258.054234] FAT-fs (loop2): Directory bread(block 131) failed [ 1258.071411] FAT-fs (loop2): Directory bread(block 132) failed [ 1258.094735] FAT-fs (loop2): Directory bread(block 133) failed [ 1258.116293] FAT-fs (loop2): Directory bread(block 134) failed [ 1258.136829] FAT-fs (loop2): Directory bread(block 135) failed [ 1258.154226] FAT-fs (loop2): Directory bread(block 136) failed [ 1258.172756] FAT-fs (loop2): Directory bread(block 137) failed 13:02:45 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x7702000000000000, 0xfffffffffffffffe}) 13:02:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1258.297149] attempt to access beyond end of device [ 1258.302264] loop2: rw=2049, want=310, limit=128 [ 1258.319153] attempt to access beyond end of device [ 1258.324226] loop2: rw=2049, want=311, limit=128 [ 1258.341044] attempt to access beyond end of device [ 1258.346127] loop2: rw=2049, want=312, limit=128 [ 1258.361971] attempt to access beyond end of device [ 1258.367035] loop2: rw=2049, want=313, limit=128 [ 1258.382737] attempt to access beyond end of device [ 1258.387798] loop2: rw=2049, want=326, limit=128 [ 1258.392656] attempt to access beyond end of device [ 1258.397683] loop2: rw=2049, want=327, limit=128 [ 1258.402830] attempt to access beyond end of device [ 1258.407891] loop2: rw=2049, want=328, limit=128 [ 1258.412762] attempt to access beyond end of device [ 1258.417790] loop2: rw=2049, want=329, limit=128 [ 1258.424528] attempt to access beyond end of device [ 1258.429568] loop2: rw=2049, want=2153, limit=128 [ 1258.444277] attempt to access beyond end of device [ 1258.449350] loop2: rw=2049, want=2154, limit=128 [ 1258.469531] attempt to access beyond end of device [ 1258.474616] loop2: rw=2049, want=2154, limit=128 13:02:46 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x3f000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c6, 0x0) 13:02:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xf0ffffffffffffff, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:46 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) 13:02:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1258.737093] FAT-fs (loop2): Directory bread(block 128) failed [ 1258.766635] FAT-fs (loop2): Directory bread(block 129) failed 13:02:46 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x40800}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f0000001000), 0x1000) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x2, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000380)='threaded\x00', 0x9) 13:02:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000147, 0x0) 13:02:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1258.803682] FAT-fs (loop2): Directory bread(block 130) failed [ 1258.819972] FAT-fs (loop2): Directory bread(block 131) failed [ 1258.830214] FAT-fs (loop2): Directory bread(block 132) failed 13:02:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) [ 1258.895852] FAT-fs (loop2): Directory bread(block 133) failed [ 1258.927961] FAT-fs (loop2): Directory bread(block 134) failed 13:02:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:46 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) r2 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) [ 1258.973795] FAT-fs (loop2): Directory bread(block 135) failed [ 1259.013271] device bridge_slave_1 left promiscuous mode 13:02:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000044, 0x0) [ 1259.018868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.031581] FAT-fs (loop2): Directory bread(block 136) failed [ 1259.051827] FAT-fs (loop2): Directory bread(block 137) failed [ 1259.068923] device bridge_slave_0 left promiscuous mode [ 1259.074525] bridge0: port 1(bridge_slave_0) entered disabled state 13:02:46 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x4304000000000000, 0xfffffffffffffffe}) 13:02:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1259.153986] team0 (unregistering): Port device team_slave_1 removed [ 1259.192520] team0 (unregistering): Port device team_slave_0 removed [ 1259.215268] IPVS: ftp: loaded support on port[0] = 21 [ 1259.226309] attempt to access beyond end of device [ 1259.231499] loop2: rw=2049, want=310, limit=128 [ 1259.236218] buffer_io_error: 38 callbacks suppressed [ 1259.236231] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1259.251491] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1259.258899] attempt to access beyond end of device [ 1259.263999] loop2: rw=2049, want=311, limit=128 [ 1259.268730] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1259.277320] attempt to access beyond end of device [ 1259.282376] loop2: rw=2049, want=312, limit=128 [ 1259.287154] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1259.295530] attempt to access beyond end of device [ 1259.300572] loop2: rw=2049, want=313, limit=128 [ 1259.305310] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1259.316346] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1259.323598] attempt to access beyond end of device [ 1259.328771] loop2: rw=2049, want=326, limit=128 [ 1259.333494] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1259.342055] attempt to access beyond end of device [ 1259.347084] loop2: rw=2049, want=327, limit=128 [ 1259.351812] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1259.375225] bond0 (unregistering): Released all slaves [ 1259.386008] attempt to access beyond end of device [ 1259.391143] loop2: rw=2049, want=328, limit=128 [ 1259.395889] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1259.404380] attempt to access beyond end of device [ 1259.409519] loop2: rw=2049, want=329, limit=128 [ 1259.414246] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1259.438341] attempt to access beyond end of device [ 1259.443422] loop2: rw=2049, want=2153, limit=128 [ 1259.464745] attempt to access beyond end of device [ 1259.469816] loop2: rw=2049, want=2154, limit=128 [ 1259.491537] attempt to access beyond end of device [ 1259.496605] loop2: rw=2049, want=2154, limit=128 13:02:47 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x4000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 13:02:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b3, 0x0) 13:02:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xf60f000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:47 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) 13:02:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1259.772650] FAT-fs (loop2): Directory bread(block 128) failed [ 1259.792807] FAT-fs (loop2): Directory bread(block 129) failed [ 1259.812689] FAT-fs (loop2): Directory bread(block 130) failed 13:02:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ed, 0x0) [ 1259.841630] FAT-fs (loop2): Directory bread(block 131) failed [ 1259.871135] FAT-fs (loop2): Directory bread(block 132) failed 13:02:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1259.908910] FAT-fs (loop2): Directory bread(block 133) failed [ 1259.940723] FAT-fs (loop2): Directory bread(block 134) failed 13:02:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000050, 0x0) [ 1259.956803] FAT-fs (loop2): Directory bread(block 135) failed 13:02:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000070, 0x0) 13:02:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1259.987503] FAT-fs (loop2): Directory bread(block 136) failed [ 1260.022776] FAT-fs (loop2): Directory bread(block 137) failed [ 1260.196757] attempt to access beyond end of device [ 1260.201825] loop2: rw=2049, want=310, limit=128 [ 1260.206543] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1260.231783] attempt to access beyond end of device [ 1260.237072] loop2: rw=2049, want=311, limit=128 [ 1260.241783] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1260.272704] attempt to access beyond end of device [ 1260.277736] loop2: rw=2049, want=312, limit=128 [ 1260.290126] attempt to access beyond end of device [ 1260.295183] loop2: rw=2049, want=313, limit=128 [ 1260.313532] attempt to access beyond end of device [ 1260.318582] loop2: rw=2049, want=326, limit=128 [ 1260.334078] attempt to access beyond end of device [ 1260.339210] loop2: rw=2049, want=327, limit=128 [ 1260.348856] attempt to access beyond end of device [ 1260.353910] loop2: rw=2049, want=328, limit=128 [ 1260.374218] attempt to access beyond end of device [ 1260.379246] loop2: rw=2049, want=329, limit=128 [ 1260.385729] attempt to access beyond end of device [ 1260.390843] loop2: rw=2049, want=2153, limit=128 [ 1260.405470] attempt to access beyond end of device [ 1260.410494] loop2: rw=2049, want=2154, limit=128 [ 1260.430090] attempt to access beyond end of device [ 1260.435111] loop2: rw=2049, want=2154, limit=128 [ 1260.680758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.687316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.709896] device bridge_slave_0 entered promiscuous mode [ 1260.746540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.752969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.760176] device bridge_slave_1 entered promiscuous mode [ 1260.804848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1260.835378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1260.924935] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1260.959891] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1260.991361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1260.998284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1261.030075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1261.037335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1261.126790] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1261.134201] team0: Port device team_slave_0 added [ 1261.164754] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1261.172104] team0: Port device team_slave_1 added [ 1261.202201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1261.236066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1261.268687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1261.275829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1261.283651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1261.316431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1261.323622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1261.331624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.639417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.645870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.652726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.659133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.666763] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1261.920134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1262.781850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.886383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1262.992358] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1262.998587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1263.013671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1263.110117] 8021q: adding VLAN 0 to HW filter on device team0 13:02:51 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x401, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000480)=""/91, &(0x7f0000000200)=0xf3) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x400, 0x10}, 0xc) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x2000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend='noextend', 0x2c}, {@cache_none='cache=none', 0x2c}, {@msize={'msize', 0x3d, 0xffff}, 0x2c}, {@noextend='noextend', 0x2c}, {@access_user='access=user', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@access_uid={'access', 0x3d, r4}, 0x2c}]}}) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000121, 0x0) 13:02:51 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xc9050000, 0xfffffffffffffffe}) 13:02:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x7a00000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000097, 0x0) 13:02:51 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) 13:02:51 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0xaaaaaa9}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1263.773878] FAT-fs (loop2): Directory bread(block 128) failed [ 1263.793780] FAT-fs (loop2): Directory bread(block 129) failed [ 1263.806323] 9pnet: Insufficient options for proto=fd [ 1263.818318] FAT-fs (loop2): Directory bread(block 130) failed 13:02:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000006f, 0x0) [ 1263.837489] FAT-fs (loop2): Directory bread(block 131) failed [ 1263.854484] FAT-fs (loop2): Directory bread(block 132) failed 13:02:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008d, 0x0) [ 1263.881716] FAT-fs (loop2): Directory bread(block 133) failed [ 1263.900877] FAT-fs (loop2): Directory bread(block 134) failed [ 1263.916222] FAT-fs (loop2): Directory bread(block 135) failed 13:02:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000009f, 0x0) [ 1263.932762] FAT-fs (loop2): Directory bread(block 136) failed [ 1263.958125] FAT-fs (loop2): Directory bread(block 137) failed 13:02:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000010a, 0x0) [ 1264.146748] attempt to access beyond end of device [ 1264.151866] loop2: rw=2049, want=310, limit=128 [ 1264.187816] attempt to access beyond end of device [ 1264.192885] loop2: rw=2049, want=311, limit=128 [ 1264.220442] attempt to access beyond end of device [ 1264.225499] loop2: rw=2049, want=312, limit=128 [ 1264.251899] attempt to access beyond end of device [ 1264.256979] loop2: rw=2049, want=313, limit=128 [ 1264.261721] buffer_io_error: 9 callbacks suppressed [ 1264.261732] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1264.295482] attempt to access beyond end of device [ 1264.300559] loop2: rw=2049, want=326, limit=128 [ 1264.305305] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1264.323099] attempt to access beyond end of device [ 1264.328148] loop2: rw=2049, want=327, limit=128 [ 1264.332874] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1264.398613] attempt to access beyond end of device [ 1264.403672] loop2: rw=2049, want=328, limit=128 [ 1264.408377] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1264.435808] attempt to access beyond end of device [ 1264.440882] loop2: rw=2049, want=329, limit=128 [ 1264.445600] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1264.474815] attempt to access beyond end of device [ 1264.479910] loop2: rw=2049, want=2153, limit=128 [ 1264.496512] 9pnet: Insufficient options for proto=fd [ 1264.505460] attempt to access beyond end of device [ 1264.510653] loop2: rw=2049, want=2154, limit=128 [ 1264.528491] attempt to access beyond end of device [ 1264.533640] loop2: rw=2049, want=2154, limit=128 13:02:51 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x201000000) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000cb, 0x0) 13:02:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000010f, 0x0) 13:02:51 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xad06, 0xfffffffffffffffe}) 13:02:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x26000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:52 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)) 13:02:52 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x8000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000004, 0x0) [ 1264.705317] FAT-fs (loop2): Directory bread(block 128) failed 13:02:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008a, 0x0) 13:02:52 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYPTR64, @ANYBLOB="7b3260646e1e57590f23b3a79f800957d38f590d6aa84dddfbd4a9a3e899d0d381b086e84aaffc88881c1589e5e0d9dc901894490b68456b8d6b47aea503b055798ee057e6ca3304b6ba1493b8d09a552d57f179394736ee217b43515e45a114f7635491f81e3e95"]) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:02:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1264.771792] FAT-fs (loop2): Directory bread(block 129) failed [ 1264.796184] device bridge_slave_1 left promiscuous mode [ 1264.801785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.807752] FAT-fs (loop2): Directory bread(block 130) failed [ 1264.847797] FAT-fs (loop2): Directory bread(block 131) failed [ 1264.857558] device bridge_slave_0 left promiscuous mode [ 1264.863147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.881148] FAT-fs (loop2): Directory bread(block 132) failed 13:02:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1264.907094] FAT-fs (loop2): Directory bread(block 133) failed [ 1264.932822] team0 (unregistering): Port device team_slave_1 removed [ 1264.943324] FAT-fs (loop2): Directory bread(block 134) failed 13:02:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1264.953383] team0 (unregistering): Port device team_slave_0 removed [ 1264.966887] FAT-fs (loop2): Directory bread(block 135) failed [ 1264.982267] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1264.987190] IPVS: ftp: loaded support on port[0] = 21 [ 1264.991736] FAT-fs (loop2): Directory bread(block 136) failed 13:02:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1265.020721] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1265.032616] FAT-fs (loop2): Directory bread(block 137) failed [ 1265.085070] bond0 (unregistering): Released all slaves 13:02:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000082, 0x0) 13:02:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1265.161752] attempt to access beyond end of device [ 1265.166877] loop2: rw=2049, want=310, limit=128 [ 1265.171630] Buffer I/O error on dev loop2, logical block 309, lost async page write 13:02:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000012b, 0x0) 13:02:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1265.248391] attempt to access beyond end of device [ 1265.253470] loop2: rw=2049, want=311, limit=128 [ 1265.258207] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1265.339005] attempt to access beyond end of device [ 1265.344114] loop2: rw=2049, want=312, limit=128 [ 1265.348860] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1265.376129] attempt to access beyond end of device [ 1265.381188] loop2: rw=2049, want=313, limit=128 [ 1265.385959] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1265.419140] attempt to access beyond end of device [ 1265.424233] loop2: rw=2049, want=326, limit=128 [ 1265.428964] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1265.458987] attempt to access beyond end of device [ 1265.464073] loop2: rw=2049, want=327, limit=128 [ 1265.480545] attempt to access beyond end of device [ 1265.485627] loop2: rw=2049, want=2154, limit=128 [ 1265.502513] attempt to access beyond end of device [ 1265.507589] loop2: rw=2049, want=328, limit=128 [ 1265.525032] attempt to access beyond end of device [ 1265.530173] loop2: rw=2049, want=329, limit=128 [ 1265.550757] attempt to access beyond end of device [ 1265.555848] loop2: rw=2049, want=2153, limit=128 [ 1265.580966] attempt to access beyond end of device [ 1265.586065] loop2: rw=2049, want=2154, limit=128 13:02:53 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x959, 0xfffffffffffffffe}) 13:02:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000021, 0x0) 13:02:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:53 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x3f00}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000073, 0x0) 13:02:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x20000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:53 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)) [ 1265.896394] FAT-fs (loop2): Directory bread(block 128) failed [ 1265.910214] FAT-fs (loop2): Directory bread(block 129) failed [ 1265.934270] FAT-fs (loop2): Directory bread(block 130) failed [ 1265.953151] FAT-fs (loop2): Directory bread(block 131) failed [ 1265.976804] FAT-fs (loop2): Directory bread(block 132) failed [ 1265.989509] FAT-fs (loop2): Directory bread(block 133) failed [ 1266.008791] FAT-fs (loop2): Directory bread(block 134) failed [ 1266.025424] FAT-fs (loop2): Directory bread(block 135) failed [ 1266.039400] FAT-fs (loop2): Directory bread(block 136) failed [ 1266.052101] FAT-fs (loop2): Directory bread(block 137) failed [ 1266.169740] attempt to access beyond end of device [ 1266.174820] loop2: rw=2049, want=310, limit=128 [ 1266.194438] attempt to access beyond end of device [ 1266.199519] loop2: rw=2049, want=311, limit=128 [ 1266.212316] attempt to access beyond end of device [ 1266.217358] loop2: rw=2049, want=312, limit=128 [ 1266.227193] attempt to access beyond end of device [ 1266.232604] loop2: rw=2049, want=313, limit=128 [ 1266.253861] attempt to access beyond end of device [ 1266.258931] loop2: rw=2049, want=326, limit=128 [ 1266.277116] attempt to access beyond end of device [ 1266.282180] loop2: rw=2049, want=327, limit=128 [ 1266.293776] attempt to access beyond end of device [ 1266.298850] loop2: rw=2049, want=328, limit=128 [ 1266.319940] attempt to access beyond end of device [ 1266.325153] loop2: rw=2049, want=329, limit=128 [ 1266.343364] attempt to access beyond end of device [ 1266.348418] loop2: rw=2049, want=2153, limit=128 [ 1266.365659] attempt to access beyond end of device [ 1266.370706] loop2: rw=2049, want=2154, limit=128 [ 1266.397331] attempt to access beyond end of device [ 1266.402419] loop2: rw=2049, want=2154, limit=128 [ 1266.554612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.561066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.577740] device bridge_slave_0 entered promiscuous mode [ 1266.652119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.658815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.669128] device bridge_slave_1 entered promiscuous mode [ 1266.701306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1266.739789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1266.836787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1266.886680] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1267.028010] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1267.035830] team0: Port device team_slave_0 added [ 1267.065735] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1267.073120] team0: Port device team_slave_1 added [ 1267.103275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1267.137470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1267.170932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1267.178278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1267.192995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1267.220652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1267.227849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1267.242388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1267.541762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.548182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.554806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.561260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.568575] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1267.712097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1268.656415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.759749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1268.864109] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1268.870331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1268.878375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1268.983518] 8021q: adding VLAN 0 to HW filter on device team0 13:02:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e0, 0x0) 13:02:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:56 executing program 4: r0 = fanotify_init(0x68, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x3, 0x0, 0x81}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x10000, 0x0) 13:02:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x100000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:56 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x1f09000000000000, 0xfffffffffffffffe}) 13:02:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000060, 0x0) 13:02:56 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)) 13:02:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0xa9aaaa0a}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) [ 1269.646170] FAT-fs (loop2): Directory bread(block 128) failed 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1269.693758] FAT-fs (loop2): Directory bread(block 129) failed [ 1269.722505] FAT-fs (loop2): Directory bread(block 130) failed 13:02:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007a, 0x0) 13:02:57 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x79, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e24, @multicast1=0xe0000001}, 0x12, 0x20, 0xff, 0x0, 0x9, &(0x7f0000000080)='syzkaller0\x00', 0x0, 0x0, 0x6}) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x12326b52) [ 1269.743228] FAT-fs (loop2): Directory bread(block 131) failed 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000085, 0x0) [ 1269.784712] FAT-fs (loop2): Directory bread(block 132) failed [ 1269.794505] device bridge_slave_1 left promiscuous mode [ 1269.800123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.821378] FAT-fs (loop2): Directory bread(block 133) failed 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1269.842611] FAT-fs (loop2): Directory bread(block 134) failed [ 1269.850047] device bridge_slave_0 left promiscuous mode [ 1269.855644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.871333] FAT-fs (loop2): Directory bread(block 135) failed [ 1269.885275] FAT-fs (loop2): Directory bread(block 136) failed 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1269.908934] FAT-fs (loop2): Directory bread(block 137) failed [ 1269.934923] team0 (unregistering): Port device team_slave_1 removed 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1269.958840] IPVS: ftp: loaded support on port[0] = 21 [ 1269.967150] team0 (unregistering): Port device team_slave_0 removed [ 1269.987984] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1270.016094] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1270.030597] attempt to access beyond end of device [ 1270.036104] loop2: rw=2049, want=310, limit=128 [ 1270.040816] buffer_io_error: 11 callbacks suppressed [ 1270.040827] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1270.054622] attempt to access beyond end of device [ 1270.059678] loop2: rw=2049, want=311, limit=128 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1270.064488] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1270.088192] bond0 (unregistering): Released all slaves [ 1270.100954] attempt to access beyond end of device [ 1270.106078] loop2: rw=2049, want=312, limit=128 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1270.110801] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1270.134047] attempt to access beyond end of device [ 1270.139130] loop2: rw=2049, want=313, limit=128 [ 1270.143867] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1270.161735] attempt to access beyond end of device [ 1270.166816] loop2: rw=2049, want=326, limit=128 [ 1270.171538] Buffer I/O error on dev loop2, logical block 325, lost async page write 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1270.235268] attempt to access beyond end of device [ 1270.240408] loop2: rw=2049, want=327, limit=128 [ 1270.245140] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1270.272936] attempt to access beyond end of device [ 1270.278099] loop2: rw=2049, want=328, limit=128 [ 1270.282831] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1270.293198] attempt to access beyond end of device [ 1270.298272] loop2: rw=2049, want=329, limit=128 [ 1270.303004] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1270.344497] attempt to access beyond end of device [ 1270.349603] loop2: rw=2049, want=2153, limit=128 [ 1270.374405] attempt to access beyond end of device [ 1270.379465] loop2: rw=2049, want=2154, limit=128 [ 1270.402503] attempt to access beyond end of device [ 1270.407578] loop2: rw=2049, want=2154, limit=128 13:02:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xffffff0f, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:02:57 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x8a09000000000000, 0xfffffffffffffffe}) 13:02:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000bb, 0x0) 13:02:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ad, 0x0) [ 1270.543144] FAT-fs (loop2): Directory bread(block 128) failed [ 1270.565297] FAT-fs (loop2): Directory bread(block 129) failed 13:02:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x4000000000000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:02:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:02:57 executing program 3 (fault-call:8 fault-nth:0): r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) [ 1270.600875] FAT-fs (loop2): Directory bread(block 130) failed [ 1270.622362] FAT-fs (loop2): Directory bread(block 131) failed [ 1270.643687] FAT-fs (loop2): Directory bread(block 132) failed [ 1270.685464] FAT-fs (loop2): Directory bread(block 133) failed [ 1270.709619] FAT-fs (loop2): Directory bread(block 134) failed [ 1270.731247] FAT-fs (loop2): Directory bread(block 135) failed [ 1270.740203] FAT-fs (loop2): Directory bread(block 136) failed [ 1270.781482] FAT-fs (loop2): Directory bread(block 137) failed [ 1270.914285] attempt to access beyond end of device [ 1270.919349] loop2: rw=2049, want=310, limit=128 [ 1270.924088] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1270.973573] attempt to access beyond end of device [ 1270.978641] loop2: rw=2049, want=311, limit=128 [ 1270.983396] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1271.024961] attempt to access beyond end of device [ 1271.030040] loop2: rw=2049, want=312, limit=128 [ 1271.046089] attempt to access beyond end of device [ 1271.051159] loop2: rw=2049, want=313, limit=128 [ 1271.070995] attempt to access beyond end of device [ 1271.076068] loop2: rw=2049, want=326, limit=128 [ 1271.093992] attempt to access beyond end of device [ 1271.099058] loop2: rw=2049, want=327, limit=128 [ 1271.129084] attempt to access beyond end of device [ 1271.134165] loop2: rw=2049, want=328, limit=128 [ 1271.156482] attempt to access beyond end of device [ 1271.161535] loop2: rw=2049, want=329, limit=128 [ 1271.182142] attempt to access beyond end of device [ 1271.187214] loop2: rw=2049, want=2153, limit=128 [ 1271.229295] attempt to access beyond end of device [ 1271.234386] loop2: rw=2049, want=2154, limit=128 [ 1271.256821] attempt to access beyond end of device [ 1271.261865] loop2: rw=2049, want=2154, limit=128 [ 1271.506269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.512801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.520811] device bridge_slave_0 entered promiscuous mode [ 1271.559095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.565560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.573358] device bridge_slave_1 entered promiscuous mode [ 1271.622337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1271.656312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1271.764156] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1271.798393] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1271.938780] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1271.946465] team0: Port device team_slave_0 added [ 1271.976084] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1271.983587] team0: Port device team_slave_1 added [ 1272.013851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1272.053593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1272.086450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1272.120597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1272.420880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.427295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.433927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.440295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.447988] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1273.248097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1273.529301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.636356] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1273.740316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1273.746577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1273.760357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1273.862374] 8021q: adding VLAN 0 to HW filter on device team0 13:03:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000012e, 0x0) 13:03:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008f, 0x0) 13:03:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:01 executing program 4: r0 = epoll_create1(0x80000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000180)={0x4}, &(0x7f00000001c0), &(0x7f0000000280)={r1, r2+30000000}, 0x8) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = dup2(r0, r3) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="4afee65b00000000800000e421176200005e1bf4b8b5ed39"]) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r5, 0x40086602, &(0x7f00000000c0)=ANY=[]) pipe2(&(0x7f00000000c0), 0x4000) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000140)) 13:03:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xfffffffffffffff0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:01 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x66060000, 0xfffffffffffffffe}) 13:03:01 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0xa9aaaa0a00000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1274.545492] FAT-fs (loop2): Directory bread(block 128) failed [ 1274.563257] FAT-fs (loop2): Directory bread(block 129) failed [ 1274.572645] FAT-fs (loop2): Directory bread(block 130) failed [ 1274.578955] FAT-fs (loop2): Directory bread(block 131) failed 13:03:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000123, 0x0) 13:03:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000087, 0x0) [ 1274.643147] FAT-fs (loop2): Directory bread(block 132) failed [ 1274.675241] FAT-fs (loop2): Directory bread(block 133) failed 13:03:02 executing program 4: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x800000000000, 0x408002) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7f, 0xffff, 0x7, 0x6}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1cfd, 0x0, 0x7fc, 0x6, 0x81}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r1, 0x5, 0x0, 0x5, 0x3, 0x80000000, 0xf823, 0xc2, {r2, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x4, 0x5, 0x6, 0x27db, 0x9e}}, &(0x7f0000000380)=0xb0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000000c0)=ANY=[]) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x1) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000080)={0x3, 0x0, 0x5, 0x100000000, 0x4, 0x20000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x28, &(0x7f00000003c0)}, 0x10) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000480), 0x4, 0xffff) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) [ 1274.698620] device bridge_slave_1 left promiscuous mode [ 1274.704203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.712936] FAT-fs (loop2): Directory bread(block 134) failed [ 1274.725921] FAT-fs (loop2): Directory bread(block 135) failed [ 1274.740489] FAT-fs (loop2): Directory bread(block 136) failed 13:03:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1274.747461] device bridge_slave_0 left promiscuous mode [ 1274.753072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.770606] FAT-fs (loop2): Directory bread(block 137) failed 13:03:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1274.828846] team0 (unregistering): Port device team_slave_1 removed [ 1274.867674] team0 (unregistering): Port device team_slave_0 removed [ 1274.883800] IPVS: ftp: loaded support on port[0] = 21 [ 1274.895842] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1274.904725] attempt to access beyond end of device [ 1274.910134] loop2: rw=2049, want=310, limit=128 [ 1274.916809] attempt to access beyond end of device [ 1274.921851] loop2: rw=2049, want=311, limit=128 [ 1274.926939] attempt to access beyond end of device 13:03:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1274.932095] loop2: rw=2049, want=312, limit=128 [ 1274.936973] attempt to access beyond end of device [ 1274.942047] loop2: rw=2049, want=313, limit=128 [ 1274.947089] attempt to access beyond end of device [ 1274.952107] loop2: rw=2049, want=326, limit=128 [ 1274.957043] attempt to access beyond end of device [ 1274.957159] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1274.962051] loop2: rw=2049, want=327, limit=128 [ 1274.962213] attempt to access beyond end of device [ 1274.978875] loop2: rw=2049, want=328, limit=128 13:03:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1274.985086] attempt to access beyond end of device [ 1274.990127] loop2: rw=2049, want=329, limit=128 [ 1274.999560] attempt to access beyond end of device [ 1275.004636] loop2: rw=2049, want=2153, limit=128 13:03:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1275.025651] attempt to access beyond end of device [ 1275.030731] loop2: rw=2049, want=2154, limit=128 [ 1275.042693] bond0 (unregistering): Released all slaves [ 1275.058765] attempt to access beyond end of device [ 1275.063825] loop2: rw=2049, want=2154, limit=128 13:03:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d0, 0x0) 13:03:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xc000000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1275.308416] FAT-fs (loop2): Directory bread(block 128) failed [ 1275.324844] FAT-fs (loop2): Directory bread(block 129) failed [ 1275.345132] FAT-fs (loop2): Directory bread(block 130) failed [ 1275.357602] FAT-fs (loop2): Directory bread(block 131) failed [ 1275.379065] FAT-fs (loop2): Directory bread(block 132) failed [ 1275.403937] FAT-fs (loop2): Directory bread(block 133) failed [ 1275.421927] FAT-fs (loop2): Directory bread(block 134) failed [ 1275.441075] FAT-fs (loop2): Directory bread(block 135) failed 13:03:02 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x92050000, 0xfffffffffffffffe}) 13:03:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000014c, 0x0) 13:03:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000014a, 0x0) 13:03:02 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0xf, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x100000000000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) [ 1275.482230] FAT-fs (loop2): Directory bread(block 136) failed [ 1275.506736] FAT-fs (loop2): Directory bread(block 137) failed 13:03:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1275.731558] attempt to access beyond end of device [ 1275.736637] loop2: rw=2049, want=310, limit=128 [ 1275.741575] buffer_io_error: 14 callbacks suppressed [ 1275.741590] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1275.793142] attempt to access beyond end of device [ 1275.798257] loop2: rw=2049, want=311, limit=128 [ 1275.803080] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1275.837092] attempt to access beyond end of device [ 1275.842151] loop2: rw=2049, want=312, limit=128 [ 1275.846872] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1275.869117] attempt to access beyond end of device [ 1275.874213] loop2: rw=2049, want=313, limit=128 [ 1275.878965] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1275.981703] attempt to access beyond end of device [ 1275.986768] loop2: rw=2049, want=326, limit=128 [ 1275.991491] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1276.036585] attempt to access beyond end of device [ 1276.041652] loop2: rw=2049, want=327, limit=128 [ 1276.046368] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1276.073464] attempt to access beyond end of device [ 1276.078559] loop2: rw=2049, want=328, limit=128 [ 1276.083341] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1276.116317] attempt to access beyond end of device [ 1276.121374] loop2: rw=2049, want=2154, limit=128 [ 1276.135673] attempt to access beyond end of device [ 1276.140770] loop2: rw=2049, want=329, limit=128 [ 1276.145492] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1276.179515] attempt to access beyond end of device [ 1276.184559] loop2: rw=2049, want=2153, limit=128 [ 1276.203132] attempt to access beyond end of device [ 1276.208239] loop2: rw=2049, want=2154, limit=128 [ 1276.378333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.384843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.392514] device bridge_slave_0 entered promiscuous mode [ 1276.426989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.434715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.443423] device bridge_slave_1 entered promiscuous mode [ 1276.477403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1276.511470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1276.623151] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1276.657859] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1276.690248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1276.697153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1276.729666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1276.736684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1276.826214] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1276.833857] team0: Port device team_slave_0 added [ 1276.864417] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1276.871679] team0: Port device team_slave_1 added [ 1276.901707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1276.935687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1276.969201] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1276.976519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1276.990900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1277.018323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1277.025483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1277.035074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1277.337449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.343897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.350558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.356937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.364877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1277.664535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1278.493551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.602569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1278.709267] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1278.715780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1278.729661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1278.832657] 8021q: adding VLAN 0 to HW filter on device team0 13:03:07 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = fcntl$getown(r0, 0x9) sched_getaffinity(r1, 0x8, &(0x7f0000000080)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000143, 0x0) 13:03:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000046, 0x0) 13:03:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x3000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:07 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0xfffffffc, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:07 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xf501, 0xfffffffffffffffe}) 13:03:07 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1279.779502] FAT-fs (loop2): Directory bread(block 128) failed [ 1279.800438] FAT-fs (loop2): Directory bread(block 129) failed [ 1279.825094] FAT-fs (loop2): Directory bread(block 130) failed 13:03:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000088, 0x0) 13:03:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1279.850155] FAT-fs (loop2): Directory bread(block 131) failed 13:03:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b0, 0x0) [ 1279.895509] FAT-fs (loop2): Directory bread(block 132) failed [ 1279.926727] FAT-fs (loop2): Directory bread(block 133) failed 13:03:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1279.952576] FAT-fs (loop2): Directory bread(block 134) failed [ 1279.977478] FAT-fs (loop2): Directory bread(block 135) failed [ 1279.985201] FAT-fs (loop2): Directory bread(block 136) failed [ 1279.996521] FAT-fs (loop2): Directory bread(block 137) failed 13:03:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000115, 0x0) 13:03:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000014b, 0x0) [ 1280.176739] attempt to access beyond end of device [ 1280.181911] loop2: rw=2049, want=310, limit=128 [ 1280.186648] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1280.246279] attempt to access beyond end of device [ 1280.251347] loop2: rw=2049, want=311, limit=128 [ 1280.256064] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1280.303234] attempt to access beyond end of device [ 1280.308448] loop2: rw=2049, want=312, limit=128 [ 1280.335187] attempt to access beyond end of device [ 1280.340278] loop2: rw=2049, want=313, limit=128 [ 1280.347543] attempt to access beyond end of device [ 1280.352632] loop2: rw=2049, want=326, limit=128 [ 1280.358611] attempt to access beyond end of device [ 1280.363800] loop2: rw=2049, want=327, limit=128 [ 1280.369148] attempt to access beyond end of device [ 1280.374189] loop2: rw=2049, want=328, limit=128 [ 1280.379460] attempt to access beyond end of device [ 1280.384493] loop2: rw=2049, want=329, limit=128 [ 1280.391949] attempt to access beyond end of device [ 1280.397045] loop2: rw=2049, want=2153, limit=128 [ 1280.417896] attempt to access beyond end of device [ 1280.422964] loop2: rw=2049, want=2154, limit=128 [ 1280.443175] attempt to access beyond end of device [ 1280.448254] loop2: rw=2049, want=2157, limit=128 13:03:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000041, 0x0) 13:03:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:07 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xfffffff5, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000144, 0x0) 13:03:07 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1400, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:07 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x3101000000000000, 0xfffffffffffffffe}) [ 1280.704410] FAT-fs (loop2): Directory bread(block 128) failed [ 1280.728106] FAT-fs (loop2): Directory bread(block 129) failed [ 1280.743657] FAT-fs (loop2): Directory bread(block 130) failed 13:03:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:08 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x209d2008) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e1, 0x0) [ 1280.767722] FAT-fs (loop2): Directory bread(block 131) failed [ 1280.788937] FAT-fs (loop2): Directory bread(block 132) failed 13:03:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000105, 0x0) 13:03:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1280.824057] FAT-fs (loop2): Directory bread(block 133) failed [ 1280.851590] FAT-fs (loop2): Directory bread(block 134) failed [ 1280.873372] FAT-fs (loop2): Directory bread(block 135) failed 13:03:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1280.897171] FAT-fs (loop2): Directory bread(block 136) failed [ 1280.924682] FAT-fs (loop2): Directory bread(block 137) failed 13:03:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000104, 0x0) 13:03:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000011e, 0x0) 13:03:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1281.090849] attempt to access beyond end of device [ 1281.095923] loop2: rw=2049, want=310, limit=128 [ 1281.100713] buffer_io_error: 6 callbacks suppressed [ 1281.100723] Buffer I/O error on dev loop2, logical block 309, lost async page write 13:03:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000013c, 0x0) [ 1281.160955] attempt to access beyond end of device [ 1281.166044] loop2: rw=2049, want=311, limit=128 [ 1281.170764] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1281.208570] attempt to access beyond end of device [ 1281.213634] loop2: rw=2049, want=312, limit=128 [ 1281.218360] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1281.258839] attempt to access beyond end of device [ 1281.263943] loop2: rw=2049, want=313, limit=128 [ 1281.268694] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1281.307106] attempt to access beyond end of device [ 1281.312185] loop2: rw=2049, want=326, limit=128 [ 1281.316948] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1281.346545] attempt to access beyond end of device [ 1281.351640] loop2: rw=2049, want=327, limit=128 [ 1281.356452] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1281.364455] attempt to access beyond end of device [ 1281.369557] loop2: rw=2049, want=328, limit=128 [ 1281.374307] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1281.385539] attempt to access beyond end of device [ 1281.390621] loop2: rw=2049, want=329, limit=128 [ 1281.395344] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1281.405130] attempt to access beyond end of device [ 1281.410318] loop2: rw=2049, want=2153, limit=128 [ 1281.427524] attempt to access beyond end of device [ 1281.432564] loop2: rw=2049, want=2154, limit=128 [ 1281.455474] attempt to access beyond end of device [ 1281.460579] loop2: rw=2049, want=2154, limit=128 13:03:08 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x4) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000004a, 0x0) 13:03:08 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0xaaaaaa9}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000035, 0x0) 13:03:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x68, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:09 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000100)) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x5, 0x4}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x1000}, &(0x7f0000000200)=0x8) 13:03:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000127, 0x0) 13:03:09 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xd7080000, 0xfffffffffffffffe}) 13:03:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1281.724271] FAT-fs (loop2): Directory bread(block 128) failed 13:03:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000084, 0x0) [ 1281.772985] FAT-fs (loop2): Directory bread(block 129) failed 13:03:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000033, 0x0) [ 1281.814413] FAT-fs (loop2): Directory bread(block 130) failed [ 1281.850975] FAT-fs (loop2): Directory bread(block 131) failed 13:03:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000013b, 0x0) 13:03:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1281.877973] FAT-fs (loop2): Directory bread(block 132) failed [ 1281.902734] FAT-fs (loop2): Directory bread(block 133) failed [ 1281.942418] FAT-fs (loop2): Directory bread(block 134) failed [ 1281.966129] FAT-fs (loop2): Directory bread(block 135) failed [ 1281.988754] FAT-fs (loop2): Directory bread(block 136) failed [ 1282.011090] FAT-fs (loop2): Directory bread(block 137) failed [ 1282.116159] attempt to access beyond end of device [ 1282.121251] loop2: rw=2049, want=310, limit=128 [ 1282.125975] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1282.155478] attempt to access beyond end of device [ 1282.160550] loop2: rw=2049, want=311, limit=128 [ 1282.165277] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1282.187113] attempt to access beyond end of device [ 1282.192159] loop2: rw=2049, want=312, limit=128 [ 1282.212256] attempt to access beyond end of device [ 1282.217284] loop2: rw=2049, want=313, limit=128 [ 1282.243119] attempt to access beyond end of device [ 1282.248197] loop2: rw=2049, want=326, limit=128 [ 1282.261098] attempt to access beyond end of device [ 1282.266192] loop2: rw=2049, want=327, limit=128 [ 1282.280734] attempt to access beyond end of device [ 1282.285812] loop2: rw=2049, want=328, limit=128 13:03:09 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept4(r0, 0x0, &(0x7f0000000280), 0x80800) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) signalfd4(r0, &(0x7f0000000340)={0x5237}, 0x8, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, [0xffff, 0x5, 0x3f, 0x8, 0x4, 0x694, 0xfffffffffffffc01, 0x3, 0x200, 0x2, 0x2e72, 0x100000001, 0x100000000, 0xfffffffffffffc00, 0x1]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r1, 0x4}, &(0x7f00000002c0)=0x8) creat(&(0x7f0000000300)='./file0\x00', 0x40) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x20) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000109, 0x0) 13:03:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1282.308097] attempt to access beyond end of device [ 1282.313144] loop2: rw=2049, want=329, limit=128 [ 1282.334152] attempt to access beyond end of device [ 1282.339385] loop2: rw=2049, want=2153, limit=128 [ 1282.376591] attempt to access beyond end of device [ 1282.381673] loop2: rw=2049, want=2154, limit=128 [ 1282.409289] attempt to access beyond end of device [ 1282.414399] loop2: rw=2049, want=2154, limit=128 13:03:10 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0xa9aaaa0a00000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000004b, 0x0) 13:03:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xc0000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000013d, 0x0) 13:03:10 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xa070000, 0xfffffffffffffffe}) 13:03:10 executing program 0: r0 = epoll_create1(0x0) r1 = memfd_create(&(0x7f0000000080)=']:\x00', 0x3) ioctl$TIOCSBRK(r1, 0x5427) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) timerfd_create(0x2, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r4 = memfd_create(&(0x7f0000000140)="776c616e3140216c6f776c616e3070726f63b86367726f7570776c616e3000", 0x0) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x478bb221, 0xffffffffffffff6a, &(0x7f00000001c0)={0x2}, 0x8) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000200)=0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000092, 0x0) [ 1282.785910] FAT-fs (loop2): Directory bread(block 128) failed [ 1282.812855] FAT-fs (loop2): Directory bread(block 129) failed [ 1282.828116] FAT-fs (loop2): Directory bread(block 130) failed 13:03:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1282.840111] FAT-fs (loop2): Directory bread(block 131) failed [ 1282.861118] FAT-fs (loop2): Directory bread(block 132) failed 13:03:10 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) fcntl$setstatus(r1, 0x4, 0xb7c7e1ac63f5fcc7) 13:03:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000110, 0x0) [ 1282.885255] FAT-fs (loop2): Directory bread(block 133) failed [ 1282.900496] FAT-fs (loop2): Directory bread(block 134) failed [ 1282.911646] FAT-fs (loop2): Directory bread(block 135) failed [ 1282.925141] FAT-fs (loop2): Directory bread(block 136) failed 13:03:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000146, 0x0) [ 1282.955473] FAT-fs (loop2): Directory bread(block 137) failed 13:03:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a8, 0x0) [ 1283.096429] attempt to access beyond end of device [ 1283.101504] loop2: rw=2049, want=310, limit=128 [ 1283.120865] attempt to access beyond end of device [ 1283.125965] loop2: rw=2049, want=311, limit=128 [ 1283.152715] attempt to access beyond end of device [ 1283.157786] loop2: rw=2049, want=312, limit=128 [ 1283.185200] attempt to access beyond end of device [ 1283.190280] loop2: rw=2049, want=313, limit=128 [ 1283.200889] attempt to access beyond end of device [ 1283.205959] loop2: rw=2049, want=326, limit=128 [ 1283.214105] attempt to access beyond end of device [ 1283.219162] loop2: rw=2049, want=327, limit=128 [ 1283.224453] attempt to access beyond end of device [ 1283.229600] loop2: rw=2049, want=328, limit=128 [ 1283.235307] attempt to access beyond end of device [ 1283.240333] loop2: rw=2049, want=329, limit=128 [ 1283.248084] attempt to access beyond end of device [ 1283.253172] loop2: rw=2049, want=2153, limit=128 [ 1283.270631] attempt to access beyond end of device [ 1283.275682] loop2: rw=2049, want=2154, limit=128 [ 1283.296568] attempt to access beyond end of device [ 1283.301678] loop2: rw=2049, want=2154, limit=128 13:03:11 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x3f000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b5, 0x0) 13:03:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000053, 0x0) 13:03:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:11 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x9c09, 0xfffffffffffffffe}) 13:03:11 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:11 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x143340, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xdcac, 0x4000) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f00000001c0)) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x600000) timerfd_settime(r2, 0x1, &(0x7f0000000100)={{0x77359400}, {r3, r4+30000000}}, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1283.824606] FAT-fs (loop2): Directory bread(block 128) failed [ 1283.845524] FAT-fs (loop2): Directory bread(block 129) failed [ 1283.864597] FAT-fs (loop2): Directory bread(block 130) failed 13:03:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ef, 0x0) [ 1283.884767] FAT-fs (loop2): Directory bread(block 131) failed [ 1283.898106] FAT-fs (loop2): Directory bread(block 132) failed [ 1283.919651] FAT-fs (loop2): Directory bread(block 133) failed 13:03:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000bc, 0x0) 13:03:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1283.960873] FAT-fs (loop2): Directory bread(block 134) failed [ 1284.004687] FAT-fs (loop2): Directory bread(block 135) failed [ 1284.029625] FAT-fs (loop2): Directory bread(block 136) failed 13:03:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1284.052439] FAT-fs (loop2): Directory bread(block 137) failed 13:03:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000002f, 0x0) 13:03:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000033, 0x0) 13:03:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1284.238522] attempt to access beyond end of device [ 1284.243608] loop2: rw=2049, want=310, limit=128 [ 1284.269082] attempt to access beyond end of device [ 1284.274152] loop2: rw=2049, want=311, limit=128 [ 1284.289734] attempt to access beyond end of device [ 1284.294828] loop2: rw=2049, want=312, limit=128 [ 1284.311664] attempt to access beyond end of device [ 1284.316723] loop2: rw=2049, want=313, limit=128 [ 1284.332640] attempt to access beyond end of device [ 1284.337699] loop2: rw=2049, want=326, limit=128 [ 1284.361961] attempt to access beyond end of device [ 1284.367046] loop2: rw=2049, want=327, limit=128 [ 1284.390421] attempt to access beyond end of device [ 1284.395483] loop2: rw=2049, want=328, limit=128 [ 1284.417112] attempt to access beyond end of device [ 1284.422219] loop2: rw=2049, want=329, limit=128 [ 1284.442142] attempt to access beyond end of device [ 1284.447192] loop2: rw=2049, want=2153, limit=128 [ 1284.471824] attempt to access beyond end of device [ 1284.476926] loop2: rw=2049, want=2154, limit=128 [ 1284.497898] attempt to access beyond end of device [ 1284.502935] loop2: rw=2049, want=2154, limit=128 13:03:12 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x3f00}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000001c, 0x0) 13:03:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000000c, 0x0) 13:03:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1284.869806] FAT-fs (loop2): Directory bread(block 128) failed [ 1284.896514] FAT-fs (loop2): Directory bread(block 129) failed [ 1284.912739] FAT-fs (loop2): Directory bread(block 130) failed 13:03:12 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r3, &(0x7f0000000340)="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", 0x1000, 0x20004000, &(0x7f0000000100)=@ax25={0x3, {"2d4c5294131f09"}, 0x3}, 0x80) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:12 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xb0080000, 0xfffffffffffffffe}) 13:03:12 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = shmget(0x2, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/105) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x21c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000180)=0x19, 0x4) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000054, 0x0) 13:03:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000005b, 0x0) 13:03:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1284.926085] FAT-fs (loop2): Directory bread(block 131) failed [ 1284.955542] FAT-fs (loop2): Directory bread(block 132) failed 13:03:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b2, 0x0) [ 1284.991123] FAT-fs (loop2): Directory bread(block 133) failed [ 1285.013664] FAT-fs (loop2): Directory bread(block 134) failed 13:03:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000062, 0x0) 13:03:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1285.037430] FAT-fs (loop2): Directory bread(block 135) failed [ 1285.058858] FAT-fs (loop2): Directory bread(block 136) failed [ 1285.079075] FAT-fs (loop2): Directory bread(block 137) failed 13:03:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1285.262193] attempt to access beyond end of device [ 1285.267374] loop2: rw=2049, want=310, limit=128 [ 1285.289336] attempt to access beyond end of device [ 1285.294487] loop2: rw=2049, want=311, limit=128 [ 1285.312418] attempt to access beyond end of device [ 1285.317470] loop2: rw=2049, want=312, limit=128 [ 1285.334329] attempt to access beyond end of device [ 1285.339509] loop2: rw=2049, want=313, limit=128 [ 1285.357501] attempt to access beyond end of device [ 1285.362676] loop2: rw=2049, want=326, limit=128 [ 1285.378417] attempt to access beyond end of device [ 1285.383457] loop2: rw=2049, want=327, limit=128 [ 1285.400514] attempt to access beyond end of device [ 1285.405551] loop2: rw=2049, want=328, limit=128 [ 1285.422440] attempt to access beyond end of device [ 1285.427499] loop2: rw=2049, want=329, limit=128 [ 1285.445990] attempt to access beyond end of device [ 1285.451031] loop2: rw=2049, want=2153, limit=128 [ 1285.475680] attempt to access beyond end of device [ 1285.480715] loop2: rw=2049, want=2154, limit=128 [ 1285.510319] attempt to access beyond end of device [ 1285.515368] loop2: rw=2049, want=2154, limit=128 13:03:13 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x100000000000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000098, 0x0) 13:03:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000129, 0x0) 13:03:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xff0f0000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1285.914216] FAT-fs (loop2): Directory bread(block 128) failed [ 1285.929772] FAT-fs (loop2): Directory bread(block 129) failed [ 1285.937408] FAT-fs (loop2): Directory bread(block 130) failed [ 1285.944377] FAT-fs (loop2): Directory bread(block 131) failed [ 1285.957094] FAT-fs (loop2): Directory bread(block 132) failed 13:03:13 executing program 0: r0 = epoll_create1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(r1, &(0x7f0000000100)={0x30, 0x7, 0x1, 0x81, 0x10001, 0xffff, 0x8d, 0x6}, 0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:13 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x50030000, 0xfffffffffffffffe}) 13:03:13 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x140) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e8, 0x0) 13:03:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000059, 0x0) [ 1285.969588] FAT-fs (loop2): Directory bread(block 133) failed [ 1285.987440] FAT-fs (loop2): Directory bread(block 134) failed 13:03:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1286.033104] FAT-fs (loop2): Directory bread(block 135) failed [ 1286.071257] FAT-fs (loop2): Directory bread(block 136) failed [ 1286.078347] FAT-fs (loop2): Directory bread(block 137) failed 13:03:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000025, 0x0) 13:03:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000010d, 0x0) 13:03:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1286.248200] attempt to access beyond end of device [ 1286.253284] loop2: rw=2049, want=310, limit=128 [ 1286.258079] buffer_io_error: 30 callbacks suppressed [ 1286.258091] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1286.325120] attempt to access beyond end of device [ 1286.330220] loop2: rw=2049, want=311, limit=128 [ 1286.334936] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1286.363006] attempt to access beyond end of device [ 1286.368111] loop2: rw=2049, want=312, limit=128 [ 1286.372830] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1286.399331] attempt to access beyond end of device [ 1286.404451] loop2: rw=2049, want=313, limit=128 [ 1286.409163] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1286.432414] attempt to access beyond end of device [ 1286.437464] loop2: rw=2049, want=326, limit=128 [ 1286.443276] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1286.467705] attempt to access beyond end of device [ 1286.472808] loop2: rw=2049, want=327, limit=128 [ 1286.477534] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1286.502010] attempt to access beyond end of device [ 1286.507099] loop2: rw=2049, want=328, limit=128 [ 1286.511824] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1286.538228] attempt to access beyond end of device [ 1286.543455] loop2: rw=2049, want=329, limit=128 [ 1286.548236] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1286.577468] attempt to access beyond end of device [ 1286.582621] loop2: rw=2049, want=2153, limit=128 [ 1286.606705] attempt to access beyond end of device [ 1286.611796] loop2: rw=2049, want=2154, limit=128 [ 1286.633304] attempt to access beyond end of device [ 1286.638374] loop2: rw=2049, want=2154, limit=128 13:03:14 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x8000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000002c, 0x0) 13:03:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000104, 0x0) 13:03:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x7400000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1286.934714] FAT-fs (loop2): Directory bread(block 128) failed [ 1286.942483] FAT-fs (loop2): Directory bread(block 129) failed [ 1286.950109] FAT-fs (loop2): Directory bread(block 130) failed [ 1286.977112] FAT-fs (loop2): Directory bread(block 131) failed [ 1286.983430] FAT-fs (loop2): Directory bread(block 132) failed [ 1286.999164] FAT-fs (loop2): Directory bread(block 133) failed [ 1287.005381] FAT-fs (loop2): Directory bread(block 134) failed [ 1287.011707] FAT-fs (loop2): Directory bread(block 135) failed [ 1287.017835] FAT-fs (loop2): Directory bread(block 136) failed 13:03:14 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x90070000, 0xfffffffffffffffe}) 13:03:14 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xff1, 0x20400) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r0}) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:14 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) ftruncate(r0, 0x461) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x109102, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @loopback=0x7f000001}, 0x3, 0x2, 0x4, 0x2}}, 0x2e) 13:03:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000050, 0x0) 13:03:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ee, 0x0) [ 1287.035603] FAT-fs (loop2): Directory bread(block 137) failed 13:03:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000df, 0x0) 13:03:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000124, 0x0) 13:03:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1287.185833] attempt to access beyond end of device [ 1287.190912] loop2: rw=2049, want=310, limit=128 [ 1287.195640] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1287.234092] attempt to access beyond end of device [ 1287.239159] loop2: rw=2049, want=311, limit=128 [ 1287.243891] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1287.255137] attempt to access beyond end of device [ 1287.260206] loop2: rw=2049, want=312, limit=128 13:03:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1287.282191] attempt to access beyond end of device [ 1287.287292] loop2: rw=2049, want=313, limit=128 [ 1287.322301] attempt to access beyond end of device [ 1287.327467] loop2: rw=2049, want=326, limit=128 [ 1287.355961] attempt to access beyond end of device [ 1287.361088] loop2: rw=2049, want=327, limit=128 [ 1287.394164] attempt to access beyond end of device [ 1287.399267] loop2: rw=2049, want=328, limit=128 [ 1287.425171] attempt to access beyond end of device [ 1287.430279] loop2: rw=2049, want=329, limit=128 [ 1287.448988] attempt to access beyond end of device [ 1287.454318] loop2: rw=2049, want=2153, limit=128 [ 1287.478637] attempt to access beyond end of device [ 1287.483708] loop2: rw=2049, want=2154, limit=128 [ 1287.500995] attempt to access beyond end of device [ 1287.506066] loop2: rw=2049, want=2154, limit=128 13:03:15 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x1000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000f4, 0x0) 13:03:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000009d, 0x0) 13:03:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x6c000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:15 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x83090000, 0xfffffffffffffffe}) 13:03:15 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x20) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1287.971918] FAT-fs (loop2): Directory bread(block 128) failed [ 1287.987727] FAT-fs (loop2): Directory bread(block 129) failed [ 1288.001137] FAT-fs (loop2): Directory bread(block 130) failed [ 1288.021910] FAT-fs (loop2): Directory bread(block 131) failed [ 1288.044795] FAT-fs (loop2): Directory bread(block 132) failed [ 1288.065778] FAT-fs (loop2): Directory bread(block 133) failed [ 1288.086890] FAT-fs (loop2): Directory bread(block 134) failed [ 1288.101132] FAT-fs (loop2): Directory bread(block 135) failed [ 1288.121595] FAT-fs (loop2): Directory bread(block 136) failed [ 1288.134358] FAT-fs (loop2): Directory bread(block 137) failed 13:03:15 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x40000) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) r3 = dup3(r1, r1, 0x80000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x6000901) inotify_rm_watch(r3, r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) ppoll(&(0x7f0000000100)=[{r0, 0x1000}, {r0, 0x200}, {r1, 0x4}, {r3, 0x40}, {r1, 0x4008}, {r2, 0x12}], 0x6, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x2f3}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) 13:03:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000009b, 0x0) 13:03:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000118, 0x0) 13:03:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1288.268174] attempt to access beyond end of device [ 1288.273341] loop2: rw=2049, want=310, limit=128 13:03:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000143, 0x0) [ 1288.340104] attempt to access beyond end of device [ 1288.345198] loop2: rw=2049, want=311, limit=128 [ 1288.369532] attempt to access beyond end of device [ 1288.374610] loop2: rw=2049, want=312, limit=128 13:03:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:15 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x40080, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000340)={0xe964, 0x6, 0x0, 0x9, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) [ 1288.391508] attempt to access beyond end of device [ 1288.396658] loop2: rw=2049, want=313, limit=128 [ 1288.449229] attempt to access beyond end of device [ 1288.454607] loop2: rw=2049, want=326, limit=128 [ 1288.463652] attempt to access beyond end of device [ 1288.468746] loop2: rw=2049, want=327, limit=128 [ 1288.475540] attempt to access beyond end of device [ 1288.480630] loop2: rw=2049, want=328, limit=128 [ 1288.485869] attempt to access beyond end of device [ 1288.490995] loop2: rw=2049, want=329, limit=128 [ 1288.505069] attempt to access beyond end of device [ 1288.510145] loop2: rw=2049, want=2153, limit=128 [ 1288.537958] attempt to access beyond end of device [ 1288.543041] loop2: rw=2049, want=2154, limit=128 [ 1288.569301] attempt to access beyond end of device [ 1288.574372] loop2: rw=2049, want=2154, limit=128 13:03:16 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x4000000000000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000cd, 0x0) 13:03:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b0, 0x0) 13:03:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x48, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180), &(0x7f0000000200)=0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:16 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x20a, 0xfffffffffffffffe}) 13:03:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000125, 0x0) [ 1289.007923] FAT-fs (loop2): Directory bread(block 128) failed [ 1289.039357] FAT-fs (loop2): Directory bread(block 129) failed 13:03:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000115, 0x0) 13:03:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1289.076746] FAT-fs (loop2): Directory bread(block 130) failed [ 1289.100314] FAT-fs (loop2): Directory bread(block 131) failed [ 1289.119578] FAT-fs (loop2): Directory bread(block 132) failed [ 1289.145113] FAT-fs (loop2): Directory bread(block 133) failed [ 1289.168676] FAT-fs (loop2): Directory bread(block 134) failed [ 1289.193064] FAT-fs (loop2): Directory bread(block 135) failed 13:03:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ed, 0x0) 13:03:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000002b, 0x0) [ 1289.217382] FAT-fs (loop2): Directory bread(block 136) failed [ 1289.240338] FAT-fs (loop2): Directory bread(block 137) failed 13:03:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:16 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2800, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x30, 0x7f, 0x5}, &(0x7f0000000140)=0x18) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x3, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23, @rand_addr=0x4}, 0x55, 0x400, 0x7fff, 0x2, 0x4a4e, 0x0, 0x2, 0x907, 0x2}) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000340)=""/178) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e20, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, 0x84) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) [ 1289.402389] attempt to access beyond end of device [ 1289.407451] loop2: rw=2049, want=310, limit=128 [ 1289.438191] attempt to access beyond end of device [ 1289.443238] loop2: rw=2049, want=311, limit=128 [ 1289.469217] attempt to access beyond end of device [ 1289.474264] loop2: rw=2049, want=312, limit=128 [ 1289.490789] attempt to access beyond end of device [ 1289.495857] loop2: rw=2049, want=313, limit=128 [ 1289.508152] attempt to access beyond end of device [ 1289.513209] loop2: rw=2049, want=326, limit=128 [ 1289.534476] attempt to access beyond end of device [ 1289.539514] loop2: rw=2049, want=327, limit=128 [ 1289.554240] attempt to access beyond end of device [ 1289.559276] loop2: rw=2049, want=328, limit=128 [ 1289.574058] attempt to access beyond end of device [ 1289.579121] loop2: rw=2049, want=329, limit=128 [ 1289.597448] attempt to access beyond end of device [ 1289.602497] loop2: rw=2049, want=2153, limit=128 [ 1289.626285] attempt to access beyond end of device [ 1289.631337] loop2: rw=2049, want=2154, limit=128 [ 1289.643892] attempt to access beyond end of device [ 1289.648973] loop2: rw=2049, want=2154, limit=128 13:03:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000da, 0x0) 13:03:17 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000007, 0x0) 13:03:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x26, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:17 executing program 4: ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=ANY=[]) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @pic={0x8000, 0x4, 0x6, 0x0, 0x8001, 0xfffffffffffffff7, 0x21fdb967, 0x3, 0x8, 0x401, 0x9, 0x1000000000, 0x184, 0xea, 0x7ff, 0x5}}) 13:03:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:17 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xf3020000, 0xfffffffffffffffe}) 13:03:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a3, 0x0) [ 1290.034210] FAT-fs (loop2): Directory bread(block 128) failed [ 1290.055396] FAT-fs (loop2): Directory bread(block 129) failed 13:03:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1290.118217] FAT-fs (loop2): Directory bread(block 130) failed [ 1290.141988] FAT-fs (loop2): Directory bread(block 131) failed [ 1290.164936] FAT-fs (loop2): Directory bread(block 132) failed 13:03:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000035, 0x0) [ 1290.189706] FAT-fs (loop2): Directory bread(block 133) failed [ 1290.211207] FAT-fs (loop2): Directory bread(block 134) failed 13:03:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000124, 0x0) [ 1290.239121] FAT-fs (loop2): Directory bread(block 135) failed 13:03:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000122, 0x0) [ 1290.271209] FAT-fs (loop2): Directory bread(block 136) failed [ 1290.297122] FAT-fs (loop2): Directory bread(block 137) failed 13:03:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d1, 0x0) [ 1290.489752] attempt to access beyond end of device [ 1290.494864] loop2: rw=2049, want=310, limit=128 [ 1290.521750] attempt to access beyond end of device [ 1290.526851] loop2: rw=2049, want=311, limit=128 13:03:17 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r2, 0x440}, {r1, 0x20}, {r2, 0x30}, {r2, 0x4}, {r0, 0x2041}, {r0, 0x2000}], 0x7, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000180)={0x9}, 0x8) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb267, &(0x7f0000000080), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1290.550301] attempt to access beyond end of device [ 1290.555377] loop2: rw=2049, want=312, limit=128 [ 1290.578143] attempt to access beyond end of device [ 1290.583225] loop2: rw=2049, want=313, limit=128 [ 1290.607252] attempt to access beyond end of device [ 1290.612312] loop2: rw=2049, want=326, limit=128 [ 1290.652633] attempt to access beyond end of device [ 1290.657689] loop2: rw=2049, want=327, limit=128 [ 1290.686081] attempt to access beyond end of device [ 1290.691128] loop2: rw=2049, want=328, limit=128 [ 1290.700155] attempt to access beyond end of device [ 1290.705217] loop2: rw=2049, want=329, limit=128 [ 1290.725494] attempt to access beyond end of device [ 1290.730563] loop2: rw=2049, want=2153, limit=128 [ 1290.757546] attempt to access beyond end of device [ 1290.762623] loop2: rw=2049, want=2154, limit=128 [ 1290.785786] attempt to access beyond end of device [ 1290.790864] loop2: rw=2049, want=2154, limit=128 13:03:18 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0xa9aaaa0a}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000064, 0x0) 13:03:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000009c, 0x0) 13:03:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:18 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x8000000000) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r2, 0x400, 0x70bd27, 0x25dfdbfb, {0xf}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x52f1da6e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffff001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb30b}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x24048814}, 0x0) 13:03:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x4800000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:18 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x3500, 0xfffffffffffffffe}) 13:03:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000008, 0x0) [ 1291.116844] FAT-fs (loop2): Directory bread(block 128) failed [ 1291.139252] FAT-fs (loop2): Directory bread(block 129) failed 13:03:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000099, 0x0) [ 1291.174451] FAT-fs (loop2): Directory bread(block 130) failed [ 1291.204304] FAT-fs (loop2): Directory bread(block 131) failed 13:03:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1291.234710] FAT-fs (loop2): Directory bread(block 132) failed [ 1291.260781] FAT-fs (loop2): Directory bread(block 133) failed 13:03:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000048, 0x0) 13:03:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1291.282144] FAT-fs (loop2): Directory bread(block 134) failed [ 1291.290133] FAT-fs (loop2): Directory bread(block 135) failed [ 1291.304727] FAT-fs (loop2): Directory bread(block 136) failed [ 1291.318664] FAT-fs (loop2): Directory bread(block 137) failed 13:03:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000af, 0x0) [ 1291.448999] attempt to access beyond end of device [ 1291.454082] loop2: rw=2049, want=310, limit=128 [ 1291.458842] buffer_io_error: 30 callbacks suppressed [ 1291.458852] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1291.491336] attempt to access beyond end of device [ 1291.496400] loop2: rw=2049, want=311, limit=128 [ 1291.501140] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1291.529096] attempt to access beyond end of device [ 1291.534158] loop2: rw=2049, want=312, limit=128 [ 1291.538964] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1291.547583] attempt to access beyond end of device [ 1291.552604] loop2: rw=2049, want=313, limit=128 [ 1291.557327] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1291.565635] attempt to access beyond end of device [ 1291.570672] loop2: rw=2049, want=326, limit=128 [ 1291.575394] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1291.583661] attempt to access beyond end of device [ 1291.588685] loop2: rw=2049, want=327, limit=128 [ 1291.593400] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1291.601889] attempt to access beyond end of device [ 1291.606937] loop2: rw=2049, want=328, limit=128 [ 1291.611681] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1291.620172] attempt to access beyond end of device [ 1291.625180] loop2: rw=2049, want=329, limit=128 [ 1291.629904] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1291.639954] attempt to access beyond end of device [ 1291.645006] loop2: rw=2049, want=2153, limit=128 [ 1291.660494] attempt to access beyond end of device [ 1291.665580] loop2: rw=2049, want=2154, limit=128 [ 1291.686816] attempt to access beyond end of device 13:03:19 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008b, 0x0) [ 1291.691841] loop2: rw=2049, want=2154, limit=128 13:03:19 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x4000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000053, 0x0) 13:03:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x2600000000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000070, 0x0) 13:03:19 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000001500)) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = getuid() prctl$intptr(0x17, 0x9) sendmsg$nl_netfilter(r1, &(0x7f0000001480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f0000000140)={0x1300, 0x9, 0x3, 0x200, 0x70bd28, 0x25dfdbfe, {0xd, 0x0, 0x6}, [@typed={0x4, 0x69}, @typed={0x8, 0x82, @ipv4=@rand_addr}, @typed={0x14, 0x64, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="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", @typed={0x8, 0x68, @fd=r1}, @nested={0x2bc, 0x4e, [@typed={0x8, 0x4e, @pid=r2}, @typed={0x8, 0x2a, @uid=r3}, @generic="3fa724fce86d6483eb372ee923331f787921575e8efbaf5393d912ebe0bcaa46abc5009dcb71c8dc1da0501874099a3536d35c91f65d546fa85d5b1aa3f7f08b38d196095b8c97ec08e4c5291e8e899ea48dddc927e74698a4806b6b699b4cdc7d779d94e85b417f5a9c", @generic="67169e666ab762077a4dc3a2fb3bbe8870e0441f4e9e2071a723d2da0534f1087aaf3d50d7b263d56d3c78c2e18622acb6c03546fc60c6b95f856d24ead91a3ea2c9db93de91ca5b1a96b0b828d943aa05087142a068f0096f522a88792dd6c166734f0f8d45fef237a7062195bc274acf32c044e6ed3a6e3fd4a2a66a0c476574ce5ad5e9bf43c59349d5c25be2230b56044f9f311f835ddbfabf9df7d8b49441688c36ee2dfda8f67c032589fdd723431a59ca49ca6df5393125007d1ba20728a68e13471ba3d003b697646204a57fd40851809408fd6830cf2855bc49e5fc807ce3b277ed65dc62f34df7492731de3078d3cf", @generic="bab14c96ac4775ae1f98704e3c257a55b8ed6158cc6d371ec0d742a9fc1a01fb37782a3889b2c77b5bf9161b9dde20be3ba517802fdf764e42f932bd9a79b736077052c6eed042f3aa0a3d16826824cb71ce72be5ddf18ac8c31f26bddab702792ba98eb6958fad68caabc271debe391f09d27f190f11e000eaa21d6cfe469aae8344c1456289612c5f0f4c89f61daaf1f87491f4b2cb850db31d368b0b46b07439cac7fcf8c7f4397ce9341bd31d15052e410c969ccd579b746d744b97691f907edd5da14", @generic="1395f00c90501716f76d4c8cbca1c77d38ccbfc251893d9a2892d34680f14d4631e28335a92744d7b2843af21151bfccfc76ebbc8bd674d5d341e5de8426324a65fda8f1f52626d5c06a04e06fbe32556acadf1c133dc346c681c97ff81c85ac285b0d797d59acf7598ce7d395e5cd6a734c844eec34e87c4ad2922065f40895dccb"]}, @typed={0x8, 0x96, @fd=r0}]}, 0x1300}, 0x1, 0x0, 0x0, 0xc801}, 0x40040) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000014c0)={0x7, 0x401}) 13:03:19 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xa904, 0xfffffffffffffffe}) 13:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1292.126746] FAT-fs (loop2): Directory bread(block 128) failed [ 1292.150709] FAT-fs (loop2): Directory bread(block 129) failed [ 1292.167094] FAT-fs (loop2): Directory bread(block 130) failed 13:03:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000122, 0x0) 13:03:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000043, 0x0) 13:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1292.179121] FAT-fs (loop2): Directory bread(block 131) failed [ 1292.196131] FAT-fs (loop2): Directory bread(block 132) failed [ 1292.218128] FAT-fs (loop2): Directory bread(block 133) failed [ 1292.245823] FAT-fs (loop2): Directory bread(block 134) failed [ 1292.267375] FAT-fs (loop2): Directory bread(block 135) failed 13:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000072, 0x0) [ 1292.290868] FAT-fs (loop2): Directory bread(block 136) failed [ 1292.310978] FAT-fs (loop2): Directory bread(block 137) failed 13:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1292.473853] attempt to access beyond end of device [ 1292.479392] loop2: rw=2049, want=310, limit=128 [ 1292.484104] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1292.496614] attempt to access beyond end of device [ 1292.501674] loop2: rw=2049, want=311, limit=128 [ 1292.506386] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1292.515779] attempt to access beyond end of device [ 1292.520879] loop2: rw=2049, want=312, limit=128 [ 1292.526129] attempt to access beyond end of device [ 1292.531140] loop2: rw=2049, want=313, limit=128 [ 1292.536326] attempt to access beyond end of device [ 1292.541333] loop2: rw=2049, want=326, limit=128 [ 1292.547336] attempt to access beyond end of device [ 1292.552357] loop2: rw=2049, want=327, limit=128 [ 1292.557485] attempt to access beyond end of device [ 1292.562483] loop2: rw=2049, want=328, limit=128 [ 1292.567671] attempt to access beyond end of device [ 1292.572681] loop2: rw=2049, want=329, limit=128 [ 1292.579972] attempt to access beyond end of device [ 1292.584998] loop2: rw=2049, want=2153, limit=128 [ 1292.603619] attempt to access beyond end of device [ 1292.608692] loop2: rw=2049, want=2154, limit=128 [ 1292.630312] attempt to access beyond end of device [ 1292.635440] loop2: rw=2049, want=2154, limit=128 13:03:20 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1000, 0x8000) write$P9_RWRITE(r3, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x6}, 0xb) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000155, 0x0) 13:03:20 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x8}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000019, 0x0) 13:03:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0xf000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000111, 0x0) 13:03:20 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0xd8, 0xa, &(0x7f00000006c0)=[{&(0x7f0000000140)="3fd5e22622dac0a50f984397a296e02b95e6d1fe758330aff4f76fd1d3c851465634f27e8a8656cc0ff2f7c8e92cf1062694ab11cc022e716796a26315599d36322367c9aba1b2ad43d7e9e906530e640322abb8d31ccc50440a6882fd568e7f56733bc0931c0ef28f055e8a61397d1158f3632fe1934a7c182de2fcc1058130ac8d0d8556142728b43d90dfcbcaebef3036c6d999c5de3e1f89698d26e6c5", 0x9f, 0x3}, {&(0x7f0000000200)="fd8f6be3b43ebc085c45004523e10875b5fa890a1a3a92604de4564ccc73d69145f0cc1807edae20727b5d898cbb977a46fb50959fe16d122521ad7b83ea", 0x3e, 0x1}, {&(0x7f0000000240)="9cdf38d1f54d059ba8a3e9cb98628163534c23d2d328e610ea11b8691181bbc5b6bda27f5cd405c75dc1c5b81378e8979f8a6197b141010264cb3aa95db87cc44b2005e398b9450ff595cc2ea90d9fec5b1faf19c55dc46fd7491618109fdbf1372221a6ac273077f0553819fd86c376ada4bf62be99e6a8bc983cb1db0aa22a59b7e60411ec7e8be7c353d78b895b7e4ca7250799053dd3aa7ca0ca09251dc3981f2f43f3e7046555b5525d0999621ac58e4facc840d6acbb0d3baf6c06c41da4b09bd88be36e46958ec767ff67944b527370117326251c5860a44e3b36c4080336c03f88a8f1cfc92520", 0xeb, 0x8}, {&(0x7f0000000340)="edbb1994bf00ac75c0a313c5198d70fa94e902eff1b985c6fb2d42d69db86133f61be460ec33c029c89ff7f24bb04ebe95d92fe675f73ee67f1f300bf1fff6ac5bd425c6cac2e23e19cc1bf227e8ea8e646d89126f2a72afe5147ac183658bba286b48ab1edf80d4f5bc603d4e030cf78166a60c6b6a2bb61ac8dd3beaec409ae0f24bef4b660659177712d9a3955cba44475542e92fcc7aba0dbfe28bfe9a992b8aaf565742b27e664dd92d5799", 0xae, 0x1}, {&(0x7f0000000400)="a02cd17ebb49a2f97b8db465fc3489e0291928cc1e60f30fb7dd3904af94a2ba2d43f85774e1587bbc4bcf8627adf1660a3ae1825521e476f1f799a9ddd5aa8f847f187f88423798b74ef2ebfff8c5c0b8557fdd4f7c35f61286152f8db8850484ef37734f5968f2043917d987bacfc844912025583a2ad241816d9ff0fe772a603157a1313d55f27b55ca8951f527133dc2c4b2bd106421d80906e35b7c46a124534e9dd594131642bc87cbfb7793aabfebad5d139e642a2b6e016af2fa6195b1ba8723bec055c3bfb156591a5339cef27b553c6e84d95ef6b0a3fd3d5f4f1ff513c3c71fcf8b8ac13a35e61cdbf89744eb9398b5646b775f", 0xf9, 0x3}, {&(0x7f0000000500)="699b6738484b94f7e7cc44f56d252e56b0be0f041a95d45942d46dc4d786a2e0b010a0", 0x23, 0x9}, {&(0x7f0000000540)="d32e8adec311523ca0d6ff909326bc621ee7a5866d2bbedee49621a4d62cad6dd16f4340cfe56fb0cd572a941f524c5db67ae7111b43ebadc51eab352fac85ce582d4ca37e3981c6da30ab44aeffc66eb721dec7756045b3368b26aeecc03992668dd4e11002729e4f7c8ab74680788bb68458014a907ed0050d", 0x7a, 0x3}, {&(0x7f00000005c0)="f977b7f49f741005a1d0c80e40e85a2ca4b3b71cb5fe66856344b1a98a567402e28ca2f885d75a4dc972e34fc3b5b3a0730e6fec3349", 0x36, 0x32}, {&(0x7f0000000600)}, {&(0x7f0000000640)="261ae1d751dd933bc1b372acc89954a5ee68c1b69b79ad2f25eeddea097226e8ba42481c3b2e05acd145ebd93b76d3cc3ac11ae9c51ee27310442e1407a5cad1922b1616fa21f5171201102fe8ce2619543c6b6d50ba9e53084761b881d0111c8116", 0x62, 0x7}], 0x1060003, &(0x7f00000007c0)={[{@show_sys_files_no='show_sys_files=no', 0x2c}]}) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:20 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xe901, 0xfffffffffffffffe}) [ 1293.089292] device bridge_slave_1 left promiscuous mode [ 1293.094865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.106567] device bridge_slave_0 left promiscuous mode [ 1293.112168] bridge0: port 1(bridge_slave_0) entered disabled state 13:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1293.190864] FAT-fs (loop2): Directory bread(block 128) failed [ 1293.219454] FAT-fs (loop2): Directory bread(block 129) failed [ 1293.232212] team0 (unregistering): Port device team_slave_1 removed [ 1293.243264] FAT-fs (loop2): Directory bread(block 130) failed [ 1293.266530] team0 (unregistering): Port device team_slave_0 removed [ 1293.270413] FAT-fs (loop2): Directory bread(block 131) failed 13:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1293.300240] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1293.300945] FAT-fs (loop2): Directory bread(block 132) failed [ 1293.334645] bond0 (unregistering): Releasing backup interface bond_slave_0 13:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1293.344948] FAT-fs (loop2): Directory bread(block 133) failed [ 1293.368457] FAT-fs (loop2): Directory bread(block 134) failed [ 1293.389839] FAT-fs (loop2): Directory bread(block 135) failed [ 1293.408178] bond0 (unregistering): Released all slaves [ 1293.411179] FAT-fs (loop2): Directory bread(block 136) failed [ 1293.443446] FAT-fs (loop2): Directory bread(block 137) failed 13:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000000e, 0x0) 13:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c5, 0x0) [ 1293.652156] attempt to access beyond end of device [ 1293.657213] loop2: rw=2049, want=310, limit=128 [ 1293.700255] attempt to access beyond end of device [ 1293.705302] loop2: rw=2049, want=311, limit=128 [ 1293.731573] attempt to access beyond end of device [ 1293.736629] loop2: rw=2049, want=312, limit=128 [ 1293.767109] attempt to access beyond end of device [ 1293.772179] loop2: rw=2049, want=313, limit=128 13:03:21 executing program 0: r0 = epoll_create1(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x440000, 0x0) r2 = epoll_create1(0x11000000000004) r3 = timerfd_create(0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)={0x303, 0x33}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2802, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x3f, 0x9}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) ioperm(0x7, 0x6, 0x5) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000093, 0x0) [ 1293.813888] attempt to access beyond end of device [ 1293.818926] loop2: rw=2049, want=326, limit=128 [ 1293.858216] attempt to access beyond end of device [ 1293.863296] loop2: rw=2049, want=327, limit=128 [ 1293.879119] attempt to access beyond end of device [ 1293.884201] loop2: rw=2049, want=328, limit=128 [ 1293.910488] attempt to access beyond end of device [ 1293.915543] loop2: rw=2049, want=329, limit=128 [ 1293.942798] attempt to access beyond end of device [ 1293.947889] loop2: rw=2049, want=2153, limit=128 [ 1293.970745] attempt to access beyond end of device [ 1293.975766] loop2: rw=2049, want=2154, limit=128 [ 1294.010168] attempt to access beyond end of device [ 1294.015222] loop2: rw=2049, want=2154, limit=128 13:03:21 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0xffffffff00000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000145, 0x0) 13:03:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:21 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x15555555555555ce, 0xb26a, &(0x7f00000000c0)={0xfffffffffffffffd}, 0x8) timerfd_create(0x3, 0x80800) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000011, 0x0) [ 1295.053114] IPVS: ftp: loaded support on port[0] = 21 [ 1295.545961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.552556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.560061] device bridge_slave_0 entered promiscuous mode [ 1295.593235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.599680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.607464] device bridge_slave_1 entered promiscuous mode [ 1295.638098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1295.670345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1295.759941] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1295.793741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1295.936045] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1295.943966] team0: Port device team_slave_0 added [ 1295.974372] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1295.981679] team0: Port device team_slave_1 added [ 1296.011988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1296.046608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1296.080826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1296.114500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1296.416454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.422878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.429499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.435873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.443182] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1297.440136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1297.514531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.619828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1297.723278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1297.729520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1297.738060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1297.839715] 8021q: adding VLAN 0 to HW filter on device team0 13:03:26 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) socket$rds(0x15, 0x5, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) 13:03:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xf60f000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000042, 0x0) 13:03:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000019, 0x0) 13:03:26 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x20d, 0xfffffffffffffffe}) 13:03:26 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x7ffff) r2 = timerfd_create(0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r4, 0x80000001, 0xbfc}, &(0x7f0000000240)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x8, 0x7, "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", 0x98, 0x2, 0x3f, 0x7, 0xff, 0x200, 0x2, 0x1}, r5}}, 0x120) ioctl$KDDELIO(r3, 0x4b35, 0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000100)={0x7, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000021ff4)={0x2001}) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) 13:03:26 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x800000000000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:26 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) r3 = socket$unix(0x1, 0x7, 0x0) ioctl$sock_ifreq(r3, 0x8934, &(0x7f0000000100)={'ifb0\x00', @ifru_data=&(0x7f0000000080)="4281ed22849911db14212f0b9023643f349880e9b55a47c1eae41249628eee79"}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000012c, 0x0) [ 1299.099852] FAT-fs (loop2): Directory bread(block 128) failed 13:03:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000cf, 0x0) 13:03:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1299.146102] FAT-fs (loop2): Directory bread(block 129) failed [ 1299.184084] FAT-fs (loop2): Directory bread(block 130) failed [ 1299.212303] FAT-fs (loop2): Directory bread(block 131) failed [ 1299.237532] FAT-fs (loop2): Directory bread(block 132) failed 13:03:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1299.258894] FAT-fs (loop2): Directory bread(block 133) failed [ 1299.281099] FAT-fs (loop2): Directory bread(block 134) failed [ 1299.289945] FAT-fs (loop2): Directory bread(block 135) failed 13:03:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000cb, 0x0) 13:03:26 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0x38) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000141, 0x0) [ 1299.318953] FAT-fs (loop2): Directory bread(block 136) failed [ 1299.345287] FAT-fs (loop2): Directory bread(block 137) failed [ 1299.512442] attempt to access beyond end of device [ 1299.517521] loop2: rw=2049, want=310, limit=128 [ 1299.522255] buffer_io_error: 14 callbacks suppressed [ 1299.522266] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1299.548581] attempt to access beyond end of device [ 1299.553671] loop2: rw=2049, want=311, limit=128 [ 1299.558397] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1299.571309] attempt to access beyond end of device [ 1299.576456] loop2: rw=2049, want=312, limit=128 [ 1299.581184] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1299.589699] attempt to access beyond end of device [ 1299.594873] loop2: rw=2049, want=313, limit=128 [ 1299.599642] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1299.608860] attempt to access beyond end of device [ 1299.613881] loop2: rw=2049, want=326, limit=128 [ 1299.618739] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1299.627178] attempt to access beyond end of device [ 1299.632220] loop2: rw=2049, want=327, limit=128 [ 1299.636929] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1299.645259] attempt to access beyond end of device [ 1299.650289] loop2: rw=2049, want=328, limit=128 [ 1299.654995] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1299.663316] attempt to access beyond end of device [ 1299.668344] loop2: rw=2049, want=329, limit=128 [ 1299.673049] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1299.683235] attempt to access beyond end of device [ 1299.688253] loop2: rw=2049, want=2153, limit=128 [ 1299.706368] attempt to access beyond end of device [ 1299.711398] loop2: rw=2049, want=2154, limit=128 [ 1299.732156] attempt to access beyond end of device [ 1299.737227] loop2: rw=2049, want=2154, limit=128 13:03:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x6000000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d9, 0x0) 13:03:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000001a, 0x0) [ 1299.948785] FAT-fs (loop2): Directory bread(block 128) failed [ 1299.970512] FAT-fs (loop2): Directory bread(block 129) failed [ 1299.986098] FAT-fs (loop2): Directory bread(block 130) failed 13:03:27 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x1c4, 0xfffffffffffffffe}) 13:03:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1299.999547] FAT-fs (loop2): Directory bread(block 131) failed [ 1300.020435] FAT-fs (loop2): Directory bread(block 132) failed [ 1300.036867] FAT-fs (loop2): Directory bread(block 133) failed 13:03:27 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000)={0x3f00000000000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000f7, 0x0) [ 1300.053437] FAT-fs (loop2): Directory bread(block 134) failed [ 1300.075709] FAT-fs (loop2): Directory bread(block 135) failed [ 1300.082929] FAT-fs (loop2): Directory bread(block 136) failed [ 1300.091619] FAT-fs (loop2): Directory bread(block 137) failed [ 1300.162829] attempt to access beyond end of device [ 1300.167865] loop2: rw=2049, want=310, limit=128 [ 1300.172617] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1300.180890] attempt to access beyond end of device [ 1300.185907] loop2: rw=2049, want=311, limit=128 [ 1300.190621] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1300.198675] attempt to access beyond end of device [ 1300.203691] loop2: rw=2049, want=312, limit=128 [ 1300.208524] attempt to access beyond end of device [ 1300.213659] loop2: rw=2049, want=313, limit=128 [ 1300.218550] attempt to access beyond end of device [ 1300.223574] loop2: rw=2049, want=326, limit=128 [ 1300.228472] attempt to access beyond end of device [ 1300.233579] loop2: rw=2049, want=327, limit=128 [ 1300.238445] attempt to access beyond end of device [ 1300.243458] loop2: rw=2049, want=328, limit=128 13:03:27 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x10000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000200)={0x8, 0x40, 0x40, 0x5, 0xffffffff, 0x1f}) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$sock_bt(r4, 0xdd1f, &(0x7f0000000100)="3cb6fa7fba594b2ea2a6e8290c88a13fc322f158d4e93b585c9f0f81572b826d9acc723b9c61434ffcdea883e96bdefdf1a9") epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r4, 0x0, 0xfffffffffffffffa, 0x1}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000111, 0x0) 13:03:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000fe, 0x0) 13:03:27 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x4}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1300.267238] attempt to access beyond end of device [ 1300.272431] loop2: rw=2049, want=329, limit=128 13:03:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:27 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x161000, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0xbf, @loopback=0x7f000001, 0x4e20, 0x3, 'nq\x00', 0x22, 0x5, 0x17}, 0x2c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) [ 1300.313908] attempt to access beyond end of device [ 1300.319004] loop2: rw=2049, want=2153, limit=128 [ 1300.373363] attempt to access beyond end of device [ 1300.378407] loop2: rw=2049, want=2154, limit=128 [ 1300.402213] device bridge_slave_1 left promiscuous mode [ 1300.407809] bridge0: port 2(bridge_slave_1) entered disabled state 13:03:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000013f, 0x0) [ 1300.428875] attempt to access beyond end of device [ 1300.433953] loop2: rw=2049, want=2154, limit=128 [ 1300.445370] device bridge_slave_0 left promiscuous mode [ 1300.450934] bridge0: port 1(bridge_slave_0) entered disabled state 13:03:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x4c000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c5, 0x0) 13:03:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1300.538293] team0 (unregistering): Port device team_slave_1 removed [ 1300.539051] IPVS: ftp: loaded support on port[0] = 21 [ 1300.564714] team0 (unregistering): Port device team_slave_0 removed [ 1300.583292] FAT-fs (loop2): Directory bread(block 128) failed [ 1300.597390] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1300.605233] FAT-fs (loop2): Directory bread(block 129) failed [ 1300.620223] FAT-fs (loop2): Directory bread(block 130) failed [ 1300.628561] FAT-fs (loop2): Directory bread(block 131) failed [ 1300.636085] FAT-fs (loop2): Directory bread(block 132) failed [ 1300.642250] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1300.648880] FAT-fs (loop2): Directory bread(block 133) failed [ 1300.669714] FAT-fs (loop2): Directory bread(block 134) failed [ 1300.676392] bond0 (unregistering): Released all slaves [ 1300.690082] FAT-fs (loop2): Directory bread(block 135) failed [ 1300.708350] FAT-fs (loop2): Directory bread(block 136) failed [ 1300.739920] FAT-fs (loop2): Directory bread(block 137) failed [ 1300.898760] attempt to access beyond end of device [ 1300.903804] loop2: rw=2049, want=310, limit=128 [ 1300.925908] attempt to access beyond end of device [ 1300.931055] loop2: rw=2049, want=311, limit=128 13:03:28 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x2e2, 0xfffffffffffffffe}) 13:03:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1300.953160] attempt to access beyond end of device [ 1300.958702] loop2: rw=2049, want=312, limit=128 [ 1300.985462] attempt to access beyond end of device [ 1300.990537] loop2: rw=2049, want=313, limit=128 [ 1301.010309] attempt to access beyond end of device [ 1301.015360] loop2: rw=2049, want=326, limit=128 [ 1301.033225] attempt to access beyond end of device [ 1301.038264] loop2: rw=2049, want=327, limit=128 13:03:28 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x209d2008) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000000c, 0x0) [ 1301.057100] attempt to access beyond end of device [ 1301.062147] loop2: rw=2049, want=328, limit=128 [ 1301.079941] attempt to access beyond end of device [ 1301.084982] loop2: rw=2049, want=329, limit=128 [ 1301.117951] attempt to access beyond end of device [ 1301.123037] loop2: rw=2049, want=2153, limit=128 13:03:28 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000100)={{}, {r3, r4+30000000}}, &(0x7f0000000140)) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ca, 0x0) 13:03:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000015, 0x0) 13:03:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xe00, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1301.480151] FAT-fs (loop2): Directory bread(block 128) failed [ 1301.510831] FAT-fs (loop2): Directory bread(block 129) failed [ 1301.538583] FAT-fs (loop2): Directory bread(block 130) failed [ 1301.569347] FAT-fs (loop2): Directory bread(block 131) failed [ 1301.593084] FAT-fs (loop2): Directory bread(block 132) failed [ 1301.630397] FAT-fs (loop2): Directory bread(block 133) failed [ 1301.643108] FAT-fs (loop2): Directory bread(block 134) failed [ 1301.655131] FAT-fs (loop2): Directory bread(block 135) failed [ 1301.665101] FAT-fs (loop2): Directory bread(block 136) failed [ 1301.688123] FAT-fs (loop2): Directory bread(block 137) failed [ 1301.814752] attempt to access beyond end of device [ 1301.819827] loop2: rw=2049, want=310, limit=128 [ 1301.831787] attempt to access beyond end of device [ 1301.836841] loop2: rw=2049, want=311, limit=128 [ 1301.841632] attempt to access beyond end of device [ 1301.846663] loop2: rw=2049, want=312, limit=128 [ 1301.857092] attempt to access beyond end of device [ 1301.862168] loop2: rw=2049, want=313, limit=128 [ 1301.885574] attempt to access beyond end of device [ 1301.890633] loop2: rw=2049, want=326, limit=128 [ 1301.897095] attempt to access beyond end of device [ 1301.902124] loop2: rw=2049, want=327, limit=128 [ 1301.912136] attempt to access beyond end of device [ 1301.917198] loop2: rw=2049, want=328, limit=128 [ 1301.934641] attempt to access beyond end of device [ 1301.939701] loop2: rw=2049, want=329, limit=128 [ 1301.954436] attempt to access beyond end of device [ 1301.959471] loop2: rw=2049, want=2153, limit=128 [ 1302.009457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.015954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.023539] device bridge_slave_0 entered promiscuous mode [ 1302.057167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.063668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.071180] device bridge_slave_1 entered promiscuous mode [ 1302.102561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1302.134326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1302.227452] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1302.261564] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1302.323529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1302.330486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1302.425604] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1302.432981] team0: Port device team_slave_0 added [ 1302.477449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1302.486205] team0: Port device team_slave_1 added [ 1302.517812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1302.551726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1302.584464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1302.591627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1302.605946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1302.635051] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1302.642264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1302.656878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1302.961915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.968329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.974974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.981332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.988747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1303.328287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1304.095724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.201604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1304.303936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1304.310158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1304.323875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1304.423423] 8021q: adding VLAN 0 to HW filter on device team0 13:03:32 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000034, 0x0) 13:03:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000116, 0x0) 13:03:32 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x4d060000, 0xfffffffffffffffe}) 13:03:32 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x800, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000480)={[], 0xe726, 0x7, 0x1, 0x0, 0x7, 0x6000, 0x6, [], 0x81}) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) tgkill(r0, r0, 0x1d) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x40002037}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x0, 0x84) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@deltaction={0x174, 0x31, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x4, 0x585}, [@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1e, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}, {0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x61}}, {0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0x87}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x15, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x6, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0xa, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1e, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}]}, @TCA_ACT_TAB={0x9c, 0x1, [{0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x7975ef0b}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x502e}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x1000, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x48001}, 0x4008090) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:03:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x7a, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:32 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)="159d3d489002e0ec0a4d08ecf6d479d72b4b391cc3001a011860db3e01c4750a4f42e2e11602bf1c7982fc2b5b3ad5d645f7ee6ed12f22b1ef312f12a8f75f8a544cfe8db6f403995d", 0x49}, {&(0x7f00000004c0)="ecb4b655297c33a661325721c5663347a9376f2a2efeeac7ab0f3f59e179f170c03f7f6b96bcfb3a07aae3c0296d6c3ee5911129412973b96a63219cd562b26f34436c4684bd9519b1e5f3e4fd9b85f8e1fa8e3b4d560d7a23d635e9e167722199bf4a66343b75ba352a6a9453e02de12da758b88128162203f15b92e85ec6", 0x7f}, {&(0x7f0000000540)="d165dafa0ac5c1e2c03eb7d9509e6652a06e1fa60f5a9b750481e232f58e5b62b56969548bb9d03f8146cf21a57e0f214097f556666e02bc913d55938bb5f51c7501856ab7826701d188a57a2a7847ccefec7b7313ad946b9a15", 0x5a}], 0x3, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="2f8010f0d7dc4f64278bc1af66278f7baf1435b2f52172152fccbb342b5454bce824e61dd199534e6b1c117c04124a9edc40fdf7ffd33708e387ff565880bb2691485c389029f16eec44d81ff9fc28cd61d78d86590436a359b4c2217cd0b66e58bbd9b928df14e5d7c776b45c827225f49a5c2e6ee1880d87ff2f3af1bb507e32a92f64978817578b8cc4e8e28fbb2faaa7d22f22b85e", 0x97}, {&(0x7f0000000080)="5ab4829d7a77cfe67cbe43b46f238b9d2d78", 0x12}, {&(0x7f0000000200)="cd69a461d09effb14684d44a3be46b18e1ced4e034f97d4be9a58ed3f0b7cf0ff683c51231a1e8c9c0c57a85a5d7fcd5ab1dfec555808675db7e02f6d9c0fc84f4c0b50f2a8a2d09e63c757f4fe96ea5b1334319113692db2d17195acea6b1ee0ea2fcd880fc46be7dca3b924cd1d49c31227109b4442de770dbbc6a661170234b95e9a29969925d7cf0c3083565c95d1942829cd30867a77d801b790a43bcc7b9c23c13b4ccf5496b3d129e", 0xac}], 0x3, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/zero\x00', 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000a00)=0x7c, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000380)={0x1, @tick=0x218, 0x6, {0x81, 0x8}, 0x7ff, 0x3, 0x3}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x1ffe}) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x80, 0x0) 13:03:32 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26f, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1305.549833] FAT-fs (loop2): Directory bread(block 128) failed 13:03:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000126, 0x0) 13:03:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000005c, 0x0) [ 1305.604096] FAT-fs (loop2): Directory bread(block 129) failed [ 1305.623236] FAT-fs (loop2): Directory bread(block 130) failed 13:03:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1305.655726] FAT-fs (loop2): Directory bread(block 131) failed [ 1305.687468] FAT-fs (loop2): Directory bread(block 132) failed 13:03:33 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x3e000000, 0x20}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x6) 13:03:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000140, 0x0) [ 1305.702254] device bridge_slave_1 left promiscuous mode [ 1305.707869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.729986] FAT-fs (loop2): Directory bread(block 133) failed [ 1305.743191] device bridge_slave_0 left promiscuous mode [ 1305.748789] bridge0: port 1(bridge_slave_0) entered disabled state 13:03:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1305.764294] FAT-fs (loop2): Directory bread(block 134) failed [ 1305.794077] FAT-fs (loop2): Directory bread(block 135) failed [ 1305.814166] FAT-fs (loop2): Directory bread(block 136) failed [ 1305.842431] FAT-fs (loop2): Directory bread(block 137) failed [ 1305.849383] team0 (unregistering): Port device team_slave_1 removed 13:03:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1305.861505] IPVS: ftp: loaded support on port[0] = 21 [ 1305.868951] team0 (unregistering): Port device team_slave_0 removed [ 1305.885434] bond0 (unregistering): Releasing backup interface bond_slave_1 13:03:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1305.909384] bond0 (unregistering): Releasing backup interface bond_slave_0 13:03:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000bc, 0x0) [ 1305.969599] attempt to access beyond end of device [ 1305.970402] bond0 (unregistering): Released all slaves [ 1305.974627] loop2: rw=2049, want=310, limit=128 [ 1305.974638] buffer_io_error: 22 callbacks suppressed [ 1305.974646] Buffer I/O error on dev loop2, logical block 309, lost async page write 13:03:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1306.078712] attempt to access beyond end of device [ 1306.083854] loop2: rw=2049, want=311, limit=128 [ 1306.088581] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1306.140061] attempt to access beyond end of device [ 1306.145082] loop2: rw=2049, want=312, limit=128 [ 1306.149820] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1306.178989] attempt to access beyond end of device [ 1306.184047] loop2: rw=2049, want=313, limit=128 [ 1306.188771] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1306.220056] attempt to access beyond end of device [ 1306.225091] loop2: rw=2049, want=326, limit=128 [ 1306.229825] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1306.261056] attempt to access beyond end of device [ 1306.266100] loop2: rw=2049, want=327, limit=128 [ 1306.270829] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1306.319914] attempt to access beyond end of device [ 1306.324984] loop2: rw=2049, want=328, limit=128 [ 1306.329726] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1306.353085] attempt to access beyond end of device [ 1306.358268] loop2: rw=2049, want=329, limit=128 [ 1306.362973] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1306.398591] attempt to access beyond end of device [ 1306.403642] loop2: rw=2049, want=2153, limit=128 13:03:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:33 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xd7070000, 0xfffffffffffffffe}) 13:03:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000148, 0x0) 13:03:33 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) 13:03:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000007, 0x0) 13:03:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:33 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x10000, 0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x9, &(0x7f00000001c0)={0x9}, 0x8) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0xfe2, 0x10000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000240)=""/38) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40002017}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000300)) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:03:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000153, 0x0) [ 1306.746645] FAT-fs (loop2): Directory bread(block 128) failed [ 1306.777594] FAT-fs (loop2): Directory bread(block 129) failed [ 1306.801200] FAT-fs (loop2): Directory bread(block 130) failed [ 1306.817220] FAT-fs (loop2): Directory bread(block 131) failed [ 1306.830939] FAT-fs (loop2): Directory bread(block 132) failed [ 1306.850692] FAT-fs (loop2): Directory bread(block 133) failed [ 1306.876556] FAT-fs (loop2): Directory bread(block 134) failed [ 1306.899934] FAT-fs (loop2): Directory bread(block 135) failed [ 1306.918184] FAT-fs (loop2): Directory bread(block 136) failed [ 1306.940373] FAT-fs (loop2): Directory bread(block 137) failed [ 1307.091613] attempt to access beyond end of device [ 1307.096661] loop2: rw=2049, want=310, limit=128 [ 1307.101379] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1307.135124] attempt to access beyond end of device [ 1307.140190] loop2: rw=2049, want=311, limit=128 [ 1307.144932] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1307.163946] attempt to access beyond end of device [ 1307.169057] loop2: rw=2049, want=312, limit=128 [ 1307.174132] attempt to access beyond end of device [ 1307.179167] loop2: rw=2049, want=313, limit=128 [ 1307.189485] attempt to access beyond end of device [ 1307.194537] loop2: rw=2049, want=326, limit=128 [ 1307.214559] attempt to access beyond end of device [ 1307.219619] loop2: rw=2049, want=327, limit=128 [ 1307.236076] attempt to access beyond end of device [ 1307.241123] loop2: rw=2049, want=328, limit=128 [ 1307.252504] attempt to access beyond end of device [ 1307.257578] loop2: rw=2049, want=329, limit=128 [ 1307.280750] attempt to access beyond end of device [ 1307.285855] loop2: rw=2049, want=2153, limit=128 [ 1307.309346] attempt to access beyond end of device [ 1307.314383] loop2: rw=2049, want=2154, limit=128 [ 1307.340149] attempt to access beyond end of device [ 1307.345212] loop2: rw=2049, want=2157, limit=128 [ 1307.458768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.465270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.479433] device bridge_slave_0 entered promiscuous mode [ 1307.528258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.534705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.543502] device bridge_slave_1 entered promiscuous mode [ 1307.580103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1307.613349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1307.712047] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1307.744825] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1307.882497] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1307.889925] team0: Port device team_slave_0 added [ 1307.919468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1307.926791] team0: Port device team_slave_1 added [ 1307.956435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1307.990061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1308.022075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1308.029258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1308.043257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1308.068467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1308.075813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1308.085097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1308.396273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.402913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.409544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.415965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.423608] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1308.608143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1309.557688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.665766] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1309.773628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1309.779855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1309.787107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1309.897450] 8021q: adding VLAN 0 to HW filter on device team0 13:03:38 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x1000, {{0xa, 0x4e20, 0x8, @loopback={0x0, 0x1}, 0x1f}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x9, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x3}}]}, 0x110) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x220000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000280)=""/45) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x8, 0x3, 0x8000, 0x9, 0x2, 0x100, 0x6, 0x6, 0x9, 0x4}, 0xb) 13:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000149, 0x0) 13:03:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007b, 0x0) 13:03:38 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x4d01, 0xfffffffffffffffe}) 13:03:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xc, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:38 executing program 3: r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8be6, 0x38000) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) sched_setattr(r0, &(0x7f0000000080), 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40002017}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0)={0x1}, 0xfffffdb6) pipe(&(0x7f0000000140)={0xffffffffffffffff}) process_vm_writev(r0, &(0x7f0000002340)=[{&(0x7f0000000280)=""/10, 0xa}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f0000002480)=[{&(0x7f0000002380)=""/222, 0xde}], 0x1, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x1, 0x200200) fanotify_mark(r5, 0x5, 0x20002, r6, &(0x7f00000001c0)='./file0\x00') epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x2001}) 13:03:38 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xcd, 0x20000) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x4, 0x5, 0x10001}}, 0x28) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) timerfd_create(0x7, 0x80800) 13:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1310.883073] FAT-fs (loop2): Directory bread(block 128) failed [ 1310.891493] FAT-fs (loop2): Directory bread(block 129) failed [ 1310.897734] FAT-fs (loop2): Directory bread(block 130) failed [ 1310.904033] FAT-fs (loop2): Directory bread(block 131) failed [ 1310.910155] FAT-fs (loop2): Directory bread(block 132) failed [ 1310.916508] FAT-fs (loop2): Directory bread(block 133) failed [ 1310.923081] FAT-fs (loop2): Directory bread(block 134) failed 13:03:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ab, 0x0) [ 1310.929528] FAT-fs (loop2): Directory bread(block 135) failed [ 1310.952058] FAT-fs (loop2): Directory bread(block 136) failed [ 1310.961657] FAT-fs (loop2): Directory bread(block 137) failed 13:03:38 executing program 4: r0 = memfd_create(&(0x7f0000000100)='^selinuxwlan0\x00', 0x2) getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000300), &(0x7f0000000180)=0x4) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x9, 0x7ff, 0x7ff, 0x8, 0xffffffffffffff9c, 0x26}, 0x2c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r3}}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0xb}, 0x14) 13:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000002b, 0x0) [ 1311.077798] device bridge_slave_1 left promiscuous mode [ 1311.083535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.116956] attempt to access beyond end of device [ 1311.122050] loop2: rw=2049, want=310, limit=128 13:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000018, 0x0) [ 1311.126757] buffer_io_error: 6 callbacks suppressed [ 1311.126768] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1311.169556] device bridge_slave_0 left promiscuous mode [ 1311.175144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.188333] attempt to access beyond end of device [ 1311.193651] loop2: rw=2049, want=311, limit=128 [ 1311.198386] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1311.206571] attempt to access beyond end of device [ 1311.211634] loop2: rw=2049, want=312, limit=128 13:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1311.216373] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1311.224503] attempt to access beyond end of device [ 1311.229583] loop2: rw=2049, want=313, limit=128 [ 1311.234326] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1311.243821] attempt to access beyond end of device [ 1311.248898] loop2: rw=2049, want=326, limit=128 [ 1311.253639] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1311.257580] IPVS: ftp: loaded support on port[0] = 21 [ 1311.261747] attempt to access beyond end of device [ 1311.271717] loop2: rw=2049, want=327, limit=128 [ 1311.276459] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1311.284572] attempt to access beyond end of device [ 1311.289637] loop2: rw=2049, want=328, limit=128 [ 1311.294401] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1311.302615] attempt to access beyond end of device [ 1311.307719] loop2: rw=2049, want=329, limit=128 [ 1311.312448] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1311.322387] attempt to access beyond end of device [ 1311.327485] loop2: rw=2049, want=2153, limit=128 [ 1311.351578] team0 (unregistering): Port device team_slave_1 removed 13:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xf60f, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1311.372008] team0 (unregistering): Port device team_slave_0 removed [ 1311.392667] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1311.414933] bond0 (unregistering): Releasing backup interface bond_slave_0 13:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1311.464977] bond0 (unregistering): Released all slaves [ 1311.491444] FAT-fs (loop2): Directory bread(block 128) failed 13:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1311.513822] FAT-fs (loop2): Directory bread(block 129) failed [ 1311.527745] FAT-fs (loop2): Directory bread(block 130) failed [ 1311.543606] FAT-fs (loop2): Directory bread(block 131) failed [ 1311.574592] FAT-fs (loop2): Directory bread(block 132) failed [ 1311.590202] FAT-fs (loop2): Directory bread(block 133) failed [ 1311.598131] FAT-fs (loop2): Directory bread(block 134) failed [ 1311.630744] FAT-fs (loop2): Directory bread(block 135) failed [ 1311.650271] FAT-fs (loop2): Directory bread(block 136) failed [ 1311.664036] FAT-fs (loop2): Directory bread(block 137) failed [ 1311.769867] attempt to access beyond end of device [ 1311.774930] loop2: rw=2049, want=310, limit=128 [ 1311.779672] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1311.816356] attempt to access beyond end of device [ 1311.821535] loop2: rw=2049, want=311, limit=128 [ 1311.826260] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1311.853179] attempt to access beyond end of device [ 1311.858255] loop2: rw=2049, want=312, limit=128 13:03:39 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xee07, 0xfffffffffffffffe}) 13:03:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000029, 0x0) 13:03:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000097, 0x0) [ 1311.903240] attempt to access beyond end of device [ 1311.908349] loop2: rw=2049, want=313, limit=128 13:03:39 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000021ff4)={0x2001}) 13:03:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:39 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000240)={@host=0x2}) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x100) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000140)=""/89) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000001c0)={0x19, 0x36, 0x12, 0x18, 0x4, 0x4, 0x6, 0x88, 0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) [ 1311.974688] attempt to access beyond end of device [ 1311.979829] loop2: rw=2049, want=326, limit=128 [ 1312.043858] attempt to access beyond end of device [ 1312.048998] loop2: rw=2049, want=327, limit=128 [ 1312.084672] attempt to access beyond end of device [ 1312.089764] loop2: rw=2049, want=328, limit=128 [ 1312.107618] attempt to access beyond end of device [ 1312.112677] loop2: rw=2049, want=329, limit=128 [ 1312.134430] attempt to access beyond end of device [ 1312.139488] loop2: rw=2049, want=2153, limit=128 [ 1312.799181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.805713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.812989] device bridge_slave_0 entered promiscuous mode [ 1312.858620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.865134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.884705] device bridge_slave_1 entered promiscuous mode [ 1312.920485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1312.954511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1313.070427] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1313.121900] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1313.265942] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1313.274056] team0: Port device team_slave_0 added [ 1313.305889] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1313.313247] team0: Port device team_slave_1 added [ 1313.343833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1313.378926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1313.412464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1313.419679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1313.427604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1313.461539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1313.468734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1313.476633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1313.800555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.806988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.813627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.820193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.827737] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1313.984105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1314.978868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.086990] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1315.192492] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1315.198767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1315.212714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1315.315663] 8021q: adding VLAN 0 to HW filter on device team0 13:03:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000004a, 0x0) 13:03:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000011f, 0x0) 13:03:43 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xd800, 0xfffffffffffffffe}) 13:03:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffff0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:43 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) 13:03:43 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) creat(&(0x7f00000001c0)='./file0\x00', 0x65) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x6, 0xfffffffffffffffd, 0x200000000, 0x8000, 0x3, 0x7, 0x1, 0x1aa, 0x38, 0x2f8, 0x6, 0xac69, 0x20, 0x2, 0x49f, 0x5, 0x1}, [{0x70000007, 0xfe, 0x4, 0x6ca, 0xffff, 0x4, 0x8a23, 0xffff}, {0x3, 0x400, 0x80000000000000, 0x3, 0x1, 0x8, 0x9, 0x1}], "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1a78) 13:03:43 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000300)) r4 = dup(r3) semget$private(0x0, 0x1, 0x80) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000100)={@empty, @multicast2, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, 0x1, 0x8001, 0x7fff, 0x500, 0x2b8, 0x0, r5}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) [ 1316.292792] FAT-fs (loop2): Directory bread(block 128) failed [ 1316.316081] FAT-fs (loop2): Directory bread(block 129) failed [ 1316.334326] FAT-fs (loop2): Directory bread(block 130) failed 13:03:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a8, 0x0) [ 1316.353431] FAT-fs (loop2): Directory bread(block 131) failed [ 1316.373083] FAT-fs (loop2): Directory bread(block 132) failed [ 1316.388086] FAT-fs (loop2): Directory bread(block 133) failed 13:03:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c6, 0x0) [ 1316.412325] FAT-fs (loop2): Directory bread(block 134) failed [ 1316.429081] FAT-fs (loop2): Directory bread(block 135) failed [ 1316.452178] FAT-fs (loop2): Directory bread(block 136) failed 13:03:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1316.468154] FAT-fs (loop2): Directory bread(block 137) failed 13:03:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007a, 0x0) [ 1316.594997] attempt to access beyond end of device [ 1316.600047] loop2: rw=2049, want=310, limit=128 [ 1316.604769] buffer_io_error: 6 callbacks suppressed [ 1316.604781] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1316.628421] attempt to access beyond end of device [ 1316.633499] loop2: rw=2049, want=311, limit=128 13:03:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000130, 0x0) [ 1316.638301] Buffer I/O error on dev loop2, logical block 310, lost async page write 13:03:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1316.669118] attempt to access beyond end of device [ 1316.674185] loop2: rw=2049, want=312, limit=128 [ 1316.678907] Buffer I/O error on dev loop2, logical block 311, lost async page write 13:03:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000074, 0x0) 13:03:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1316.732121] attempt to access beyond end of device [ 1316.737178] loop2: rw=2049, want=313, limit=128 [ 1316.741892] Buffer I/O error on dev loop2, logical block 312, lost async page write 13:03:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1316.812036] attempt to access beyond end of device [ 1316.817080] loop2: rw=2049, want=326, limit=128 [ 1316.821791] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1316.862689] attempt to access beyond end of device [ 1316.867770] loop2: rw=2049, want=327, limit=128 [ 1316.872503] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1316.918109] attempt to access beyond end of device [ 1316.923179] loop2: rw=2049, want=328, limit=128 [ 1316.927901] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1316.954122] attempt to access beyond end of device [ 1316.959190] loop2: rw=2049, want=329, limit=128 [ 1316.963981] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1316.986668] attempt to access beyond end of device [ 1316.991693] loop2: rw=2049, want=2153, limit=128 13:03:44 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x5805, 0xfffffffffffffffe}) 13:03:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000139, 0x0) 13:03:44 executing program 0: r0 = epoll_create1(0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x80, 0x1, 0x80, 0x5, 0x2d98}) r1 = epoll_create1(0x0) r2 = timerfd_create(0x3, 0x100000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x2001}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40000, 0x0) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x1, 0x2, 0x1}, 0x81}}, 0x18) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x10000, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000340)={"0222c6afbdff9fb3758bc98f22a0ca2c09be60a9517a2729e8057b2d4d7aaf2d01d5a092522aa1aa21a41e6c70655244ace48b6b470672ca3a374cb983b31bcacf737b710c78f233b74b4befa8f643f6b399ae67932770de72053772aaeab504f88a022ba9addf55c16585a674e621f56491039d1728277a1b52b0a77eee33d2c1ad3720e1a88f9c5b15e3ad1b578dfc3f4630c198a05751fa85ec756dca72caf270e374a27be5517f23129a22a77dd7794b6e3da9aa4d72b8ed529f64eaa029f961f6dc2dd31ef8b71ee7725f8ea9f5f2b024c46ad650e93ea837d0fe0a5bb9a46f38325378a032c4a98958034891105fafd7ee9b447fc08f6628e80d8e1fa1430607cf07d36dce78064da24e5de9b644d487a0a9c7c5609536ca8168733f307eaa2c7f4f60d4c39fec865d5f43080b90b73f09e6dee371eaa3eaed8d16e36165ed7c81c1ae747487cb74a14c0f6810e7447401dcc3fa5a3488d3f06ad36f8ac2a38529dba7d4054a0d1a09f3869d2101a72200e9564e9ce423a2f52f0ddc5c5b87230a6d4fb67353a3d1dcffda5995e0256f9a76d7174ae56ad1cfa3091e31d62e022be63df79889522ebeca9683fb08a80e4111155b34d4667b803a1ce1b2a0418d516d3457cef23dbb51a1069aa569bbb74a20cba17ee761a0e0b5dce03b705e1f48e8156fa27e93509a0f8152942cefe2b52ddd4cb40505eab7e46b019eff31c2c53fd2f4c32f6ea1a51bf8a2ef87f7f2b17b462028944e90789ad51b576dc2baa05b795588a4813739582836b3da76af4e120701a8180e0f677c4e09f997171e4714ed38202f3d5c98df4d2d42107c7327d96e238a66973273c587f86b33adf432017b7770e6fe17f69134ff7849224cd6a402d1bc0ac53b6784a3b49ff7a239752b8a0170400390135a81518841e7f36b10df1af0aa9f5c558f1aa429085b977b13680ace95305a79c6e7ffd1cb85969653561c699ec1c5d8a97f9a7b860bd3b8eef16a1c9a590cef665c114543a4dfa47a94ae7320a3e43940d5d85c52a1db98f3af68fc93ca0fbc3743d92081a01fb8e93f676a286b08be65814c450410648530132eccd717a00d5f61427bea6d6e6b6f8d44adb1820e0590bb229c507ed32084993fd8477bc1f00744cb0d0891872477ab629431db523644b4e1da2212a902c6b339c551a16713af0e5e68a96e06b98b94adc78657266926feef7048184c7afb473c9b90b33a81d0af3e3c40ba4e9dfac6db0da6b07f806ad0657e2275a29c3779c670a991239aaa8dae445636ab20530efbeb132af01e293ee3b675bd69b51a8454a1bc1f41a964f82b8c6e7d5d743f0dc33f566921c44c3671c27551ae713e285c6677b8cab85f46a19c22a80bbc0e3c8d4f3f3c4e3cfc43b96dcd67af4cf431070217f27fe4139a6ab882c13b516f0afa4d67659ab2c65674b0"}) 13:03:44 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7c1, 0x400000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000200)=0xfffffffffffffcbf) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000138, 0x0) 13:03:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x7a000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:44 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x9, 0x9, 0x10001, 0x7, 0x7f, 0x4}, 0x4}, 0xa) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x40002017}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{0x0, 0x20}, 'port1\x00', 0x81, 0x0, 0x9, 0x1000, 0x5, 0x100000000, 0x8, 0x0, 0x1, 0x40}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x81, 0xa000) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0xc5) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:03:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000013, 0x0) 13:03:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1317.409989] FAT-fs (loop2): Directory bread(block 128) failed [ 1317.434976] FAT-fs (loop2): Directory bread(block 129) failed 13:03:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000153, 0x0) 13:03:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1317.470091] FAT-fs (loop2): Directory bread(block 130) failed [ 1317.495168] FAT-fs (loop2): Directory bread(block 131) failed 13:03:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000142, 0x0) [ 1317.521934] FAT-fs (loop2): Directory bread(block 132) failed [ 1317.548660] FAT-fs (loop2): Directory bread(block 133) failed 13:03:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1317.569370] FAT-fs (loop2): Directory bread(block 134) failed [ 1317.583251] FAT-fs (loop2): Directory bread(block 135) failed [ 1317.598246] FAT-fs (loop2): Directory bread(block 136) failed 13:03:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000059, 0x0) [ 1317.622895] FAT-fs (loop2): Directory bread(block 137) failed 13:03:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1317.788714] attempt to access beyond end of device [ 1317.793765] loop2: rw=2049, want=310, limit=128 [ 1317.798494] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1317.847113] attempt to access beyond end of device [ 1317.852180] loop2: rw=2049, want=311, limit=128 [ 1317.857217] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1317.874386] attempt to access beyond end of device [ 1317.879461] loop2: rw=2049, want=312, limit=128 [ 1317.895662] attempt to access beyond end of device [ 1317.900765] loop2: rw=2049, want=313, limit=128 [ 1317.906135] attempt to access beyond end of device [ 1317.911212] loop2: rw=2049, want=326, limit=128 [ 1317.924659] attempt to access beyond end of device [ 1317.929759] loop2: rw=2049, want=327, limit=128 [ 1317.939130] attempt to access beyond end of device [ 1317.944215] loop2: rw=2049, want=328, limit=128 [ 1317.953631] attempt to access beyond end of device [ 1317.958728] loop2: rw=2049, want=329, limit=128 [ 1317.969899] attempt to access beyond end of device [ 1317.975006] loop2: rw=2049, want=2153, limit=128 13:03:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000086, 0x0) 13:03:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000125, 0x0) 13:03:45 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000140)={'bond0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x24000) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x115, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xa, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:45 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x5905000000000000, 0xfffffffffffffffe}) 13:03:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008c, 0x0) 13:03:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000002f, 0x0) 13:03:45 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000100)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0xf8, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000380)=""/248}, &(0x7f0000000280)=0x78) r3 = memfd_create(&(0x7f0000000140)='vmnet1\x00', 0x3) getsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f0000000180)=""/192, &(0x7f0000000240)=0xc0) r4 = timerfd_create(0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000340)={0x20000000}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:03:45 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) [ 1318.474415] FAT-fs (loop2): Directory bread(block 128) failed [ 1318.500065] FAT-fs (loop2): Directory bread(block 129) failed 13:03:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000021, 0x0) [ 1318.525359] FAT-fs (loop2): Directory bread(block 130) failed [ 1318.545163] FAT-fs (loop2): Directory bread(block 131) failed [ 1318.565424] FAT-fs (loop2): Directory bread(block 132) failed 13:03:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e6, 0x0) [ 1318.585393] FAT-fs (loop2): Directory bread(block 133) failed [ 1318.605603] FAT-fs (loop2): Directory bread(block 134) failed [ 1318.619377] FAT-fs (loop2): Directory bread(block 135) failed 13:03:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1318.634337] FAT-fs (loop2): Directory bread(block 136) failed 13:03:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000005b, 0x0) [ 1318.671098] FAT-fs (loop2): Directory bread(block 137) failed 13:03:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000028, 0x0) 13:03:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e9, 0x0) [ 1318.875610] attempt to access beyond end of device [ 1318.880799] loop2: rw=2049, want=310, limit=128 [ 1318.890123] attempt to access beyond end of device [ 1318.895195] loop2: rw=2049, want=311, limit=128 [ 1318.927069] attempt to access beyond end of device [ 1318.932118] loop2: rw=2049, want=312, limit=128 [ 1318.967521] attempt to access beyond end of device [ 1318.972560] loop2: rw=2049, want=313, limit=128 [ 1319.000094] attempt to access beyond end of device [ 1319.005131] loop2: rw=2049, want=326, limit=128 [ 1319.021792] attempt to access beyond end of device [ 1319.026821] loop2: rw=2049, want=327, limit=128 [ 1319.042397] attempt to access beyond end of device [ 1319.047422] loop2: rw=2049, want=328, limit=128 [ 1319.062991] attempt to access beyond end of device [ 1319.068048] loop2: rw=2049, want=329, limit=128 [ 1319.087155] attempt to access beyond end of device [ 1319.092187] loop2: rw=2049, want=2153, limit=128 13:03:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000002c, 0x0) 13:03:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000094, 0x0) 13:03:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x300000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:46 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x3c02000000000000, 0xfffffffffffffffe}) 13:03:46 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000100)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) close(r0) fcntl$getflags(r0, 0x1) 13:03:46 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x19a9, 0x80, 0x0, 0xfffffffffffffffd}, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x80000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x10100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000340)={0x9, 0x2, 0xfff, 'queue1\x00'}) r3 = timerfd_create(0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000001c0)="e265ac86120a2ee2c8cc04d7ffb493951459202e89b831c0fd3a4cdbb745dda69510fe3fde0c27ec2ecad86deac3c09bf7971e7600e4810e0d5aa1e8e246a87bb9fa716942e9545f") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x40002017}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100)="21e463379fb6a63d", &(0x7f0000000400)="0b5d1576b8e500b77ed9b088314db6c4f5b1441ed428d44591c8baaab002da8a788641fc21bd442a2105f97cbb14ee79eca441f4650e1f0b65d9ed7bc2a5a2657eaab512df7d145a99ad4d924ed100a5d945fe6f1c8c8f745a63a2636313b0e18a4c55465dfbdc888a6ada2489372be207a25656590d444ba8cf84ae27a8fa95a0813f3c8864c31433f270f7b7bd72628b117e86e998a0b136c36530a0c1413b0b0f1945a03238126f8d00459b687e095bb3d194f533bcb667fe0695ff02f2ffe8b54335479a82e1f975185c94a0e676102d18d73c37"}, 0x20) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) syz_open_pts(r2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) ftruncate(r3, 0x9) sched_getparam(r0, &(0x7f0000000240)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000280)={0x3ff, 0x9, 0x1, 0x5746, 0x0, 0xed, 0x1, 0x7, 0x5, 0x3d7, 0xf828, 0x75}) 13:03:46 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000009c0)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001fc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000002000)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002040)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000002140)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000021c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002200)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000002300)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000002340)={@dev, @empty, 0x0}, &(0x7f0000002380)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002780)={'ip6gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000002800)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002840)={{{@in=@multicast1, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000002940)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002a40)={0x0, @local, @dev}, &(0x7f0000002a80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002b00)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000002c00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002c40)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000002c80)={'nr0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002cc0)={@loopback, @rand_addr, 0x0}, &(0x7f0000002d00)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003500)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f00000034c0)={&(0x7f0000002d40)={0x77c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {0x1}, [{{0x8, 0x1, r2}, {0x22c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r3}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xffffffff00000000}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x138, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}, {0x8, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x814}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x7}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x401, 0x7fff, 0x7fff, 0x3}, {0x5, 0x81, 0x3ff, 0x747}]}}}]}}, {{0x8, 0x1, r8}, {0x1bc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r13}, {0x1e4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffffd752ec82}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xdd}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r16}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x77c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000001) r17 = epoll_create1(0x0) r18 = epoll_create1(0x0) r19 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r18, 0x1, r17, &(0x7f0000000040)={0x40002017}) timerfd_settime(r19, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r18, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r18, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r17, 0x1, r19, &(0x7f0000021ff4)={0x2001}) r20 = dup3(r17, r19, 0x80000) sendmsg$kcm(r20, &(0x7f0000000840)={&(0x7f0000000100)=@ipx={0x4, 0x1, 0xffff, "37470fadce52", 0x9}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="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", 0xfa}, {&(0x7f0000000340)="db09593ccfea7c714643fac0f943ee79e6a10541b8bf76ed4481afded2e31dab072a4531f0728e7c5c7db930f99e862b970b889d90e3555947b878c02f7c3a8f1af48b86ab6c7dda7cf555e81eaa7b3f41f0a953bf37e8106b7750516e5bb3b9adee9d0975698510c79ea18a118bfb6bea2e565686a790d6a388920fcd760394c45f59c96070a4268432111292ee4574f9c2a5ea0e8ae3776a2e08187433f33ab85e11bc46be30477478262d9fa822de1b995d643717f659b9a45a0c03d242cdc5d49946ac1b75b49ed01c", 0xcb}, {&(0x7f0000000440)="d9334b595ca5b59be8a8b98aab9889de80903cb2bcd22f05d54725fcfa30c3c19b49c74ebd1b989e743316f9754b52034594976c069fbea4f43d0297ed19ff48f0f1367f614fb5b04dab89fc756e2330bc1359d06795382a9e02992a533ce8cd64eb4e076b897f949fd17d33da26f69e5a51807846c66e5fb837c9682c1fa57350ca96a3008ccae2c9a3c5ea29c3a8b86e53398d0deaff1492f7151e8d29f2c5b56ab2727161b222b3b83f8ba02e1e", 0xaf}, {&(0x7f0000000500)="eb9531126d8b3aa1c6ece8edff4391fc4a56842762b98a2cb00b2b2c146d52d5ec7cb07f1a2d862ac553c5a4abe4e71a46781e3f123ef0e77bd49b97241776443cdc84239b38ef17daa6fa0b1ba73c43ad25d1a121b87437135fc27e107233f992e20d87f370bd728c7b8ab8b4f7ce0c0e8ec117fbc76c6124a826f0b17c6fd3cf63e947cd581fbd468990ddf6a73318732022e8aef35c787fa5e095609ae61698a07e9b910417de57ff44502bf1720ba5e2b59730a1b88e7e8cf904f3ab5c3ec8a2bda10fa2099449f649f7ff81b38d24d3df4218f6f6be180304e8bb17f5c01ba69ffc3c5bb55f3ae908e5eabceba6", 0xf0}, {&(0x7f0000000080)="da924ea3be8a7f3c96cd6cfbd6e26172dcb8a35124b13014bc44d028bdd21c83a1b9affe6f90fa0ea461ae2fbfcc8b644a10ae0e2607072c0181", 0x3a}, {&(0x7f0000000280)="18cd142e6c5ad3da656f3a31ca16f61a3f9ad4f466bc4888a775f742733c2135a271af260bda7a21e07fee7e2f8c1ae81e40d8", 0x33}], 0x6, &(0x7f0000000680)=[{0xb8, 0x0, 0x10000, "60786e8ba4b27101fba1e9f6aa93d0282ac146c7edd2d441869ca999214d1e502592b1eafd46ab04701616002eebeaf97975e639f5bc2e5a0ed12c1d76fc5e0f731a61f2fc23512cedc098e2abdcd909720247589f88c73577ffb47b8729c7b447a5051660d83aad163caa426b954903c6482591da7f01bceb33c1aff11ee70407e6f69b08efb2eda960e8365e76081a78ff00b7a26fcb7941c124aa90d3b63960c1"}, {0x100, 0x13f, 0x5, "e33b6f820f5294c967280eb7a65a623bc306217f8a622f65d7da91d7c9cdf156c429cca16c06a13b575ae76c5c8559bef408bbd0a94c4665c76e6b3b5fb483e3a15b6d268e07e0397966b4c3a76bd76b2fd0ace468975c99e8e4f5aed9248ac4a741e3774df51e0abfe0f82bc1f4af9a5577b743713a6506ff11c4280171443045649495626f350e987f9a1c4bbd110b4992273d279bb8db1675a2922231ef9c866f910905fd6f79f0940f9e793b239b5fd4a8158191096f9a4f33979ba7da6c38a637871609ee5d2d31596b5cc63b20623d7c1c3a69487988725d346ad9a14552b8ce1aa087753699f4c9cc015f2d"}], 0x1b8, 0x8000}, 0x10) ioctl$sock_inet_SIOCRTMSG(r20, 0x890d, &(0x7f00000008c0)={0x4, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24}, 0x4, 0x2, 0x1, 0x6, 0x3, &(0x7f0000000880)='bridge0\x00', 0x200000000000000, 0x9, 0x5}) [ 1319.486317] FAT-fs (loop2): Directory bread(block 128) failed [ 1319.514154] FAT-fs (loop2): Directory bread(block 129) failed [ 1319.529272] FAT-fs (loop2): Directory bread(block 130) failed 13:03:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000006a, 0x0) [ 1319.555532] FAT-fs (loop2): Directory bread(block 131) failed [ 1319.570873] FAT-fs (loop2): Directory bread(block 132) failed 13:03:46 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000003b, 0x0) [ 1319.606101] FAT-fs (loop2): Directory bread(block 133) failed [ 1319.614456] FAT-fs (loop2): Directory bread(block 134) failed [ 1319.634491] FAT-fs (loop2): Directory bread(block 135) failed 13:03:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000036, 0x0) [ 1319.666331] FAT-fs (loop2): Directory bread(block 136) failed [ 1319.701904] FAT-fs (loop2): Directory bread(block 137) failed 13:03:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d9, 0x0) 13:03:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000146, 0x0) [ 1319.870804] attempt to access beyond end of device [ 1319.875885] loop2: rw=2049, want=310, limit=128 [ 1319.910472] attempt to access beyond end of device [ 1319.915546] loop2: rw=2049, want=311, limit=128 13:03:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1319.943651] attempt to access beyond end of device [ 1319.948728] loop2: rw=2049, want=312, limit=128 [ 1319.974111] attempt to access beyond end of device [ 1319.979200] loop2: rw=2049, want=313, limit=128 [ 1320.012853] attempt to access beyond end of device [ 1320.017954] loop2: rw=2049, want=326, limit=128 [ 1320.044039] attempt to access beyond end of device [ 1320.049105] loop2: rw=2049, want=327, limit=128 [ 1320.060311] attempt to access beyond end of device [ 1320.065503] loop2: rw=2049, want=328, limit=128 [ 1320.071702] attempt to access beyond end of device [ 1320.077115] loop2: rw=2049, want=329, limit=128 [ 1320.084269] attempt to access beyond end of device [ 1320.089338] loop2: rw=2049, want=2153, limit=128 [ 1320.100050] attempt to access beyond end of device [ 1320.105124] loop2: rw=2049, want=2154, limit=128 13:03:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xff0f0000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1320.125799] attempt to access beyond end of device [ 1320.130879] loop2: rw=2049, want=2154, limit=128 [ 1320.240369] FAT-fs (loop2): Directory bread(block 128) failed [ 1320.261112] FAT-fs (loop2): Directory bread(block 129) failed [ 1320.278481] FAT-fs (loop2): Directory bread(block 130) failed 13:03:47 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xdd090000, 0xfffffffffffffffe}) [ 1320.288084] FAT-fs (loop2): Directory bread(block 131) failed [ 1320.301237] FAT-fs (loop2): Directory bread(block 132) failed [ 1320.311638] FAT-fs (loop2): Directory bread(block 133) failed [ 1320.318366] FAT-fs (loop2): Directory bread(block 134) failed [ 1320.343836] FAT-fs (loop2): Directory bread(block 135) failed [ 1320.352208] FAT-fs (loop2): Directory bread(block 136) failed [ 1320.364535] FAT-fs (loop2): Directory bread(block 137) failed [ 1320.446809] attempt to access beyond end of device [ 1320.451892] loop2: rw=2049, want=310, limit=128 [ 1320.467419] attempt to access beyond end of device [ 1320.472512] loop2: rw=2049, want=311, limit=128 [ 1320.490390] attempt to access beyond end of device 13:03:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000022, 0x0) 13:03:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1320.495474] loop2: rw=2049, want=312, limit=128 [ 1320.514184] attempt to access beyond end of device [ 1320.519310] loop2: rw=2049, want=313, limit=128 [ 1320.525007] attempt to access beyond end of device [ 1320.530141] loop2: rw=2049, want=326, limit=128 [ 1320.535932] attempt to access beyond end of device [ 1320.540985] loop2: rw=2049, want=327, limit=128 [ 1320.546727] attempt to access beyond end of device [ 1320.551805] loop2: rw=2049, want=328, limit=128 [ 1320.557760] attempt to access beyond end of device [ 1320.562847] loop2: rw=2049, want=329, limit=128 [ 1320.586968] attempt to access beyond end of device [ 1320.592173] loop2: rw=2049, want=2153, limit=128 13:03:48 executing program 0: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x40002017}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x16fe1454, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) timerfd_settime(r1, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) io_setup(0x8000, &(0x7f0000000100)=0x0) io_submit(r3, 0x7, &(0x7f00000017c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000140)="05a643251b2506b889932463b7b47f975914be59b71a318e716a99ae78ae9d950d1904675f241452fedd3fe2c3880ef765bd47edcbab3febf3dc7205a48d532af9631ae058f2be3297ba78f9ddc7a1a6239b0f88d839d8a715011210d8fe6f582aa664333b7acd684f62ea9215ede6f599c831c0c25a102f2e8fd7ee8d7967a525e905c839fdfabbe534a75ab9c785ea80b6f682c0cbd1cd45e52a432bc9", 0x9e, 0x9, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, r2, &(0x7f0000000340)="44b7ea6245f1c7cd8965f9c340f54fb90b765693158baa22fdf1b56fff9c1e93ba82c481a29ac7225bad6a598857192727179b2755cba802a3dbefbcffc0257a5b4f1ae33f02eb3a43f418cde7eb471440a2ad7359c8bf31c943abe3792b2931877aa8f6d4d71b443bec36a06188839820acb666d05492e4e2df8f19639ffa3e795fea11db830fec26d6e76e", 0x8c, 0x80000001, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000400)="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", 0x1000, 0x0, 0x0, 0x0, r2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x8, 0x4d, r0, &(0x7f0000001400)="096b2742da5d150b8899d76969d4d0e2", 0x10, 0xffffffff80000001, 0x0, 0x1, r2}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0xc8, r1, &(0x7f0000001480)="8f6405f414955701d526086ffc2e8fcc6835d008ada28cc105bd8fe68b1615731775549f9b657c07b3e41a082d5ae672e5a221653e66456c830d540762750742e1d94ed832ee6c553c72d489ee2f9c19bf8dddab6e0e190b80f59f8d0f549db660214613661260fc6d16c150df922adf27d2ed0b50f91c92d91cc6f6034116bf6740b27a6b6ab50063bb2c76351cb088465b1d89", 0x94, 0x9e48, 0x0, 0x0, r2}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xfff00000000, r0, &(0x7f0000001580)="057602cf496d98cfafcd0cd9a3b9984b246afc68ab789159996ccc36884a728f8a7a27629fa102a0ad3bd2c6c9d215e363744e66b5446b221d1a483b12a822a6498cf18d0cf9bbd204d73baa382645156bf0c05536783bda038a756fe8efbff0a5989f84267ac3ad6dbc4f274f7c6e4f20d87005344458ac21b991f80dce144debaccd64f0ef514aab5b02e57067c5c935b3f02affe47763303d6b1cb0da9f", 0x9f, 0x10000, 0x0, 0x1, r2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000001680)="dfdc4b9ba9ed0efec8b05d245b301bd2daf8c63519cf3a054080dd8a4beebef1184b93f22e53b39933018f333cacdb1269637faf0680fd4afeeab72ee63fd99b822b9f443d5144eafa4565cbdfe0da7ee36e87340a9b30ad8c94d5477af7f65881562d015b0025943d631d1ecefe615d475ffd69140b0e46db0a89b488e8a9c573090df784bdb66eb5ba31d81ba91aa253d5d323351d179cbc1323c311e2f97ddaeed0ca864cbe6b4444dfaccdfc5dea9098c3cd14b2e982b08e91a20587cad25bafe853d7b8", 0xc6, 0x9, 0x0, 0x1, r2}]) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000021ff4)={0x2001}) 13:03:48 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESOCT]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xe5, "d4c8239a7b745acdba3764de39e4c8fcbb5268b1a1af9c99c86f87f8e2e151c253eef7fbeff3320c5075fddf0eb8481d9b190c220dbdae22bac3afcde81eab0b5b33f93260421cccfc156173d5d06be95f26416c065da2e7b30998b2d2a6df515c16cfa93a3816d3c8745970b409640326e6d1b63badaffbd8661ad86975460fc82c369344cff1e4006bf0e450b2eea0cae91dd22d83d00e554701c4386f0b17334013f4555520b395b97db9e955e52bd4153dc0b00b39b9bb36ff0ff6c9fa873d3a79cb20d53fa6f7e141c0cad68d9e68ff5be4743e22adf72331d963f75df0025db4b978"}, &(0x7f0000000180)=0xed) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r2, 0x4) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000004f, 0x0) 13:03:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:48 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200b42, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) ioctl$int_in(r1, 0x5473, &(0x7f0000000100)=0x9) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000005d, 0x0) 13:03:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x48000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ca, 0x0) 13:03:48 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000080)) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x10001, 0x7fffffff}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000001d, 0x0) [ 1320.797597] FAT-fs (loop2): Directory bread(block 128) failed [ 1320.834346] FAT-fs (loop2): Directory bread(block 129) failed [ 1320.872112] FAT-fs (loop2): Directory bread(block 130) failed [ 1320.892427] FAT-fs (loop2): Directory bread(block 131) failed [ 1320.913093] FAT-fs (loop2): Directory bread(block 132) failed 13:03:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1320.932232] FAT-fs (loop2): Directory bread(block 133) failed [ 1320.970791] FAT-fs (loop2): Directory bread(block 134) failed 13:03:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000005, 0x0) [ 1320.985095] FAT-fs (loop2): Directory bread(block 135) failed [ 1321.003153] FAT-fs (loop2): Directory bread(block 136) failed [ 1321.026474] FAT-fs (loop2): Directory bread(block 137) failed 13:03:48 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xc1080000, 0xfffffffffffffffe}) 13:03:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000099, 0x0) 13:03:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000105, 0x0) [ 1321.143403] attempt to access beyond end of device [ 1321.148630] loop2: rw=2049, want=310, limit=128 [ 1321.169810] attempt to access beyond end of device [ 1321.174870] loop2: rw=2049, want=311, limit=128 [ 1321.204117] attempt to access beyond end of device [ 1321.209163] loop2: rw=2049, want=312, limit=128 [ 1321.231304] attempt to access beyond end of device [ 1321.236356] loop2: rw=2049, want=313, limit=128 [ 1321.252124] attempt to access beyond end of device [ 1321.257234] loop2: rw=2049, want=326, limit=128 [ 1321.282366] attempt to access beyond end of device [ 1321.287437] loop2: rw=2049, want=327, limit=128 [ 1321.305094] attempt to access beyond end of device [ 1321.310140] loop2: rw=2049, want=328, limit=128 [ 1321.367936] attempt to access beyond end of device [ 1321.373133] loop2: rw=2049, want=329, limit=128 [ 1321.386539] attempt to access beyond end of device [ 1321.391563] loop2: rw=2049, want=2153, limit=128 13:03:48 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ce, 0x0) 13:03:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000046, 0x0) 13:03:49 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x3cf, 0xbd09, &(0x7f00009d2000), 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xe0000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000064, 0x0) 13:03:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000bf, 0x0) 13:03:49 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xb009, 0xfffffffffffffffe}) 13:03:49 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r3 = getegid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() getgroups(0x6, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0xee00]) r9 = dup3(r2, r1, 0x80000) r10 = fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000740)=0x0) sendmsg$unix(r9, &(0x7f0000000840)={&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000580)="0b52588fd94c2252913250405a919b2ec5ccb74c075b5d971d55db9b98c21cac9ffa143be4ed7ce8dc6fbf3b097f2daca87a506ef8aec7bbf5c1f2ef6d2f8b60d0b5158e193ec453e7bed05493d086150908a535b43f76686eb24ccc0a5796ea94c59cc47e05e30822276466d0fc2f5a0401622e767d473ebf4683d0f9ec481a90f666d653443aa2c566ffd11c0074d2e653c24da7306cfe8afe53de6380d72d323b9fb237870c097081291190e3a63224d7508ba2b5cd510de3061c2b77829eedefec6af597e250e7d5e7aa68ae20f980dfa4b1719732ed0c3b9b", 0xdb}, {&(0x7f0000000680)="cd0c7e1dfa3885c2d41adbf38d631a54dc3d1c1c840e5959ab7bbb7125ea69376f284e95e21c1485858b34dba437a79710f370441f5d66d5b556ab07191bf906cd9aa82649896ebabc158f7039fef53deb97efcfd5182bd8a0019fabed51b8b9e36dfe762fc60fd93df2a7", 0x6b}], 0x2, &(0x7f0000000780)=[@cred={0x20, 0x1, 0x2, r10, r4, r7}, @cred={0x20, 0x1, 0x2, r11, r4, r8}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r0, r2]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}], 0x90, 0x8000}, 0x4000040) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r13 = getegid() epoll_wait(r1, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x6) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setgroups(0x8, &(0x7f0000000440)=[r3, r5, r6, r7, r12, r13, r14, r15]) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) [ 1321.948639] FAT-fs (loop2): Directory bread(block 128) failed [ 1321.973104] FAT-fs (loop2): Directory bread(block 129) failed 13:03:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1321.995125] FAT-fs (loop2): Directory bread(block 130) failed [ 1322.013116] FAT-fs (loop2): Directory bread(block 131) failed [ 1322.032277] FAT-fs (loop2): Directory bread(block 132) failed 13:03:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000f5, 0x0) 13:03:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008e, 0x0) 13:03:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1322.053615] FAT-fs (loop2): Directory bread(block 133) failed [ 1322.072007] FAT-fs (loop2): Directory bread(block 134) failed [ 1322.083706] FAT-fs (loop2): Directory bread(block 135) failed [ 1322.096793] FAT-fs (loop2): Directory bread(block 136) failed [ 1322.118543] FAT-fs (loop2): Directory bread(block 137) failed 13:03:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1322.268800] attempt to access beyond end of device [ 1322.273856] loop2: rw=2049, want=310, limit=128 [ 1322.278601] buffer_io_error: 38 callbacks suppressed [ 1322.278613] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1322.332960] attempt to access beyond end of device [ 1322.338063] loop2: rw=2049, want=311, limit=128 [ 1322.342760] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1322.384536] attempt to access beyond end of device [ 1322.389565] loop2: rw=2049, want=312, limit=128 [ 1322.394266] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1322.418421] attempt to access beyond end of device [ 1322.423496] loop2: rw=2049, want=313, limit=128 13:03:49 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x3fff8000000000, 0x1, 0xffffffffffffff8c, 0x1, 0x7, 0x100000000, 0xfffffffffffffff9, 0x0}, &(0x7f00000000c0)=0x20) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000140)={0x18, 0x1, 0x0, {0xce}}, 0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x4, 0x1ff}, 0x8) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000151, 0x0) 13:03:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000075, 0x0) 13:03:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1322.428211] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1322.446385] attempt to access beyond end of device [ 1322.451424] loop2: rw=2049, want=326, limit=128 [ 1322.456143] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1322.524161] attempt to access beyond end of device [ 1322.529288] loop2: rw=2049, want=327, limit=128 [ 1322.534061] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1322.568355] attempt to access beyond end of device [ 1322.573449] loop2: rw=2049, want=328, limit=128 [ 1322.578169] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1322.604827] attempt to access beyond end of device [ 1322.609868] loop2: rw=2049, want=329, limit=128 [ 1322.614590] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1322.644673] attempt to access beyond end of device [ 1322.649770] loop2: rw=2049, want=2153, limit=128 13:03:50 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) socketpair$inet(0x2, 0x807, 0xa1b8, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000092, 0x0) 13:03:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000034, 0x0) 13:03:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x60000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:50 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) tee(r1, r2, 0xfffffffffffffff8, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:50 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xb707, 0xfffffffffffffffe}) 13:03:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1322.842703] FAT-fs (loop2): Directory bread(block 128) failed [ 1322.864924] FAT-fs (loop2): Directory bread(block 129) failed 13:03:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000012d, 0x0) [ 1322.888594] FAT-fs (loop2): Directory bread(block 130) failed [ 1322.904337] FAT-fs (loop2): Directory bread(block 131) failed [ 1322.913019] FAT-fs (loop2): Directory bread(block 132) failed [ 1322.919455] FAT-fs (loop2): Directory bread(block 133) failed 13:03:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000052, 0x0) [ 1322.948416] FAT-fs (loop2): Directory bread(block 134) failed [ 1322.960240] FAT-fs (loop2): Directory bread(block 135) failed [ 1322.971901] FAT-fs (loop2): Directory bread(block 136) failed [ 1322.983360] FAT-fs (loop2): Directory bread(block 137) failed 13:03:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1323.112273] attempt to access beyond end of device [ 1323.117326] loop2: rw=2049, want=310, limit=128 [ 1323.122051] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1323.148581] attempt to access beyond end of device [ 1323.153637] loop2: rw=2049, want=311, limit=128 [ 1323.158335] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1323.183862] attempt to access beyond end of device [ 1323.188895] loop2: rw=2049, want=312, limit=128 [ 1323.203467] attempt to access beyond end of device [ 1323.208521] loop2: rw=2049, want=313, limit=128 [ 1323.223149] attempt to access beyond end of device [ 1323.228209] loop2: rw=2049, want=326, limit=128 13:03:50 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000029, 0x0) 13:03:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000076, 0x0) 13:03:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1323.239549] attempt to access beyond end of device [ 1323.244614] loop2: rw=2049, want=327, limit=128 [ 1323.256994] attempt to access beyond end of device [ 1323.262069] loop2: rw=2049, want=328, limit=128 [ 1323.287708] attempt to access beyond end of device [ 1323.292755] loop2: rw=2049, want=329, limit=128 [ 1323.334561] attempt to access beyond end of device [ 1323.339630] loop2: rw=2049, want=2153, limit=128 [ 1323.411158] device bridge_slave_1 left promiscuous mode [ 1323.416730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.428201] device bridge_slave_0 left promiscuous mode [ 1323.433836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.504703] team0 (unregistering): Port device team_slave_1 removed [ 1323.518422] team0 (unregistering): Port device team_slave_0 removed [ 1323.531908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1323.548635] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1323.576768] bond0 (unregistering): Released all slaves 13:03:51 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x80, 0x840) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)) ioctl$TIOCEXCL(r2, 0x540c) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000140)=0x1ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000021ff4)={0x2001}) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) 13:03:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000011a, 0x0) 13:03:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a0, 0x0) 13:03:51 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000003c0)=ANY=[@ANYBLOB="bce6219e558ef0cda67ddb39cda66d4cfcee8c5c7b2b93b19fc984dc4485e9a4d11413e81043cde052b2b60f6331191701638ffe06ac54ac1e13ce530311a35d46b4445c64aeb7a97ecd459688213177f6341c2160a033c0c7a715c7ef017507e22dde58c74e0154d7a07392e26c27bb9a85fcec2bb01980bb81120762febac6c5356116bbeca462350358f5cfffb5035e83f19e1a9e0bfdebb0a540d7b034f9bf6ee6cd7a8c0cc792bf8ca12aaf44bccc90d517307321b270cdbd980fdc802135d32fb54c2bfdb47d09048d97991be65306f8f1100be63e5a7aa3231cf678d84b93800b", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYPTR64], @ANYRES64=r0, @ANYRESHEX=r0], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYPTR64, @ANYRES64=r0, @ANYBLOB="0d3868d75f8ce3000ba1a9409b4b18a7e57fd170690f4c581058f7163ab2cad30a6e4f63c22355584be526cc86fdcefabea95f8b958860ba7af49161884c505fa9633028cc6a530b7707acf06d65eb33dfccf992381e26052344a038b42880d2f508045ff12c7411d633bbf7b83880af8b46418f02e122e60f91af8a35b513554dec2657d884c80c86e5e6ce9276ba8a45746be28c67ab07fdae4e22d375952f87320833d0d56be8dad2872c25bf90e6447ce7da141879a4502e9f7e9bfd00cfd9854ca6b1bead35efc3e7b4741d0cc6e8274cc88ea25403abf1c395aed1f611a6b9d242"]]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:51 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000780)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000007c0)='net/l2cap\x00') r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) r5 = memfd_create(&(0x7f0000000980)='\x00\x00\x00', 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0x20, 0x0, 0x10000}, &(0x7f0000000180)=0xffffffffffffff2d) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000740)={r6, 0xbe24, 0x2, [0x1, 0xe2]}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40002017}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000680)=""/166, 0xa6}, {&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/230, 0x456}], 0x7, 0x0) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:03:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:51 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x32b, 0xfffffffffffffffe}) 13:03:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000113, 0x0) 13:03:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000096, 0x0) 13:03:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1324.042041] IPVS: ftp: loaded support on port[0] = 21 [ 1324.060008] FAT-fs (loop2): Directory bread(block 128) failed [ 1324.081130] FAT-fs (loop2): Directory bread(block 129) failed [ 1324.096276] FAT-fs (loop2): Directory bread(block 130) failed [ 1324.117169] FAT-fs (loop2): Directory bread(block 131) failed 13:03:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1324.149634] FAT-fs (loop2): Directory bread(block 132) failed [ 1324.174202] FAT-fs (loop2): Directory bread(block 133) failed [ 1324.198306] FAT-fs (loop2): Directory bread(block 134) failed 13:03:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000004c, 0x0) 13:03:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000055, 0x0) [ 1324.224214] FAT-fs (loop2): Directory bread(block 135) failed [ 1324.246581] FAT-fs (loop2): Directory bread(block 136) failed 13:03:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1324.280193] FAT-fs (loop2): Directory bread(block 137) failed [ 1324.450681] attempt to access beyond end of device [ 1324.455758] loop2: rw=2049, want=310, limit=128 [ 1324.482103] attempt to access beyond end of device [ 1324.487169] loop2: rw=2049, want=311, limit=128 [ 1324.518399] attempt to access beyond end of device [ 1324.523426] loop2: rw=2049, want=312, limit=128 [ 1324.559395] attempt to access beyond end of device [ 1324.564442] loop2: rw=2049, want=313, limit=128 [ 1324.593091] attempt to access beyond end of device [ 1324.598180] loop2: rw=2049, want=326, limit=128 [ 1324.608925] attempt to access beyond end of device [ 1324.613994] loop2: rw=2049, want=327, limit=128 [ 1324.629737] attempt to access beyond end of device [ 1324.634816] loop2: rw=2049, want=328, limit=128 [ 1324.650581] attempt to access beyond end of device [ 1324.655633] loop2: rw=2049, want=329, limit=128 [ 1324.674684] attempt to access beyond end of device [ 1324.679781] loop2: rw=2049, want=2153, limit=128 13:03:52 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) prctl$seccomp(0x16, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x1800000000000, 0x7fff}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000016, 0x0) 13:03:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000bb, 0x0) [ 1325.140389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.146831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.153957] device bridge_slave_0 entered promiscuous mode [ 1325.186571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.193012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.200307] device bridge_slave_1 entered promiscuous mode [ 1325.232681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1325.265281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1325.357095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1325.391742] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1325.424485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1325.431427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1325.463996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1325.470965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1325.562970] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1325.570514] team0: Port device team_slave_0 added [ 1325.601370] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1325.609616] team0: Port device team_slave_1 added [ 1325.640318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1325.674838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1325.708383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1325.715640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1325.729623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1325.757655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1325.764884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1325.775350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1325.862888] audit: type=1326 audit(1325.861:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19931 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455ab9 code=0x0 [ 1326.057894] audit: type=1326 audit(1326.056:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19931 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455ab9 code=0x0 [ 1326.131351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.138051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.144879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.151269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.158564] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1326.368332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1327.260376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.364825] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1327.469794] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1327.476290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1327.483400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1327.592088] 8021q: adding VLAN 0 to HW filter on device team0 13:03:55 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = getuid() r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000001380)='id_legacy\x00', &(0x7f00000013c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001400)="5e5ee845772b3e3cee47b9b6e99da6590eb566a3a30f47e970b4b1feff67aef0c8f1119339ae2a53d60c3fb3f20079f0084df94d", 0x34, 0xfffffffffffffff9) keyctl$unlink(0x9, r2, r3) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x5, {{0x3, 0x0, 0x9, 0x94, 0x2, 0x7, {0x5, 0x5, 0x2, 0x7, 0x0, 0x9, 0x10000, 0x8001, 0x5, 0x10000, 0x81, r1, r4, 0x6, 0x2}}, {0x0, 0x1}}}, 0xa0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000280)={0xfff, 0x8, 0x1, 0xff, 0x3, [{0x6, 0xffffffff87de77ae, 0x1ff, 0x0, 0x0, 0x8}, {0x1, 0x5, 0x2, 0x0, 0x0, 0x1}, {0x800, 0x997, 0x7, 0x0, 0x0, 0x800}]}) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000001440)="4fe044ba3e4c93462a47f296371c45c1c04ad7f943a440eb76bb6fdf8d1688bd0339d002d712ce5256ad76961cfd638cc59691dd675d47bc21998512e35dbaa53d735be879cee7fca08be0bf88d15203e6") r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffff, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:55 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x14) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1009}}, 0xffffff3c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x740, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x4d}, @in={0x2, 0x4e23, @loopback=0x7f000001}}}, 0x118) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:55 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x61c, 0xfffffffffffffffe}) 13:03:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000129, 0x0) 13:03:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007d, 0x0) 13:03:55 executing program 3: r0 = getpid() syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x9, &(0x7f0000001680)=[{&(0x7f0000000180)="0b553d064c6e3b2e7995aa97ac92e97759d6a9f69ecff59f11ddf502d3111a1b6b14118f18fddd2990c5b59f3d62182c4862cdbf1af6bf642928868539b20e0a24b7249d1a00697c57d74ddb94d8df03af046a8af705870dafab2f080b657abb77b0cba248f5ef07b1db34f32ed24fb346826b7880566e517940c4de07385bb3f73baa9b07763c58d9ede0ba", 0x8c, 0x400}, {&(0x7f0000000240)="d267e5630a14b7690da285b5", 0xc, 0xffffffffffff3eae}, {&(0x7f0000000340)="33d30180f32dfb4ad2ba202340595babbb54adf382b8ea641bc8e2fc6d1ecb3944cc3daa50ad445d146f8bd24e915958eeae6b89306f4ed50b3d4445b1ae41f75a63a529882d8a263788dd284240230f97641154f301ccf158b18b56a3460dcb36804621af3bfe3c8214da969788239fe351d0676f0cc0572c53926b28f8d4dd3675dfb98df143ed3799fbc17c61505e47c9df35f36ffced927fee3c5a202a87fe58eb7865d80e770365ee165cc38b702fe481e4606648a75df60cac89df294615401f2f3876adbc8534c9b5300f2971", 0xd0, 0x7c39}, {&(0x7f0000000280)="b08d26e047bc048a864b9551abbd0b524d0aad7514c0775fc1b8300fb0ce7180708990", 0x23, 0x4}, {&(0x7f0000000440)="6664ed9427654993a91b4bd9ceaf839f93bf295fe01d5f12244ca8a3c3fda1f677165516bab10d8239960b78c40a30c6317ace71557c176de960f4ef3818ab984fc35ecbad373d9009baf828e338de1c87481bba67a0c6b8374410ef50d05d1bf1d16d58d4385d878bacdda759fad376517d290ac54c9b68fa87ad8d7dabf7956bc2359d4995f4daa80c56ce52f26562d80542bb80d47baf435f0815d39b7b59feb183c390f76c9a5b30437078b776d17883ba1614c471a01d90f26d231dc1cef93d370f3f452cecacbd66d52c1a265a3b9a4d883cd48312f245f6c5c8aeff8ee6e0d4113d5295e314b64f67cdf5b799916f4c7549d70cbbca6285c3f055503ec468347a3ac676077e393b7d80c2035428dd15b9366f5b389b5af780ccfc81d353d94195d76173ce649e8d6c82ca35fdaa6f5100b2c22849da1284ec328d2275b1f884727d27e3fcd1f474ab5945bb304e37d58bdc9f2e833cee5cc85bb73a5e0fb543658d21c1e9f9909fbcaba47d509da9bbd2739c1a59f4aa7716ec25387ec6ffc1871e35d86db78ce0067c2c1680c6db110ba986d93a8c574d4d28b6988eea059069f209b1a3f2848218ad37adcf4dff7d741c4182c33ea23d0ea6f9fd9880b381f798289e0837a5b3925075ed293d06fe8e3c92d89714a591430ba1f9e0e72cde3bbfd6d0448e5496540d928e348155ddc2a4bc40d23d35e0d76625e12ffe697dc479aec523188deef6f3d4d7349f2ab1dbd731d322915e638292c0e1328d9f8ad13e6a391069aa84681d42b6194597577933fb1200f444e54a710d518092fb1b0e0b051033f750274564914fdba5c1a853e3fe986d8d1f6b2b4933b221943bcbfcf12532d89e88c72b78df56cd1e39142483ec34e536a13463b94c9af567f2c07683811f54ef00223b211cec6af99470160336a2c2ceab7b181e27c5654425a6be43e716e2f4857f318607d21fd705c0f709b9c2e8e70274d3e90a529fa1bb5852ac7ac90e6f1b4996097a6f4f15aabd47443391998fe433313d480b59ec73a44724306d81a36b73e4367103d2e52ae75f0f3a8514a3976a6af088ec8de604196dba11579c0281a5598edcf759b2b9809188eb4fe2b30bfa1213b5a2d172d63af021031d80e0f7338f9cb91a1dcddb27c7a6c17c2c565f704c171dd19dfa1aa994ccc9de27b744acb24028a6e2f0df7165e618c0da967d13179bb4d01343da3be219590516a7c89cecee4d88dbffa9f5016c4c5ecd3296089427f9b2a9a75fceec86f7ba9884c40eb62def4a4565b8f27338accbf96774ed55c944919d637d07ee3de73374b64256d55eda58139d19b0835d716a53d1514ddbe9c065e2d51b6b4d19cba3bb7987be1f77675bf0495d8dccefc7d3beb8e73235bc42f8364fd732dc7c1ca0482570ebb05e54c8d234fd7e4dcdfe6af9d8f1b89c9aceffeed87593da68c0de779926af17a19d58398c647936af3dd4953e40904c528c74780d33b118ba27f38788669d4b8701dedfd770657682fa9b3125713b3f3196990249ac16e79d76060b81edb47ddfa55252f2d7dd4e510c9b1c5c971b12d82257a54c6ea3ea13ab3bd968847307ec72e96f3ef4b51214ed7c96750a4b2facd080167a8a7b336ca55dc778b6fe26d7de12f841fed902e898f8afdd6a0e7fc37f70dc4080c7fe7848e0c3498eb951e7191f375e0cd1eaecd655c093226ea00811fcec4f6816a1a98f4909db997cc6bb3f8e841ce940ee394db1d95dadea786c125cc2e309d3114e0e1bc3bedb235351a9adf1cac0ed35121fde6ef3a18909d723ba0df7dbbbc234e4e15e7e58233fa36deed7f4986d9d932aa9c67a0df99921f43dfaf5e5b626b0784b44b087d79ac7c2dc8a23cb7bf64b4bc1836cbc98da93935aca537bb78aa6f07b3f9c995671b034687f2c310b2522228ba9a2eb57a406cb3238570c44975fa9a89d9d02f1aaefd07b095eccff2cd5638eeee4639787bc8e445b4678e5d716316d5d8ea899e7e9c6ed4ef1a25121f5e8d2b426e8031543a87b0c13eb93a5cbc7bfaff4891d4ea76a6260bbb1e5ad16392376415da65406b82d63119aeeea44f2ecfc89300e5cee91ecfb96446a82ed075d7c9fe42da4bf6de935e3ebd6c6e6f4e6359d6c641867b657c17ad67d0bbe19088237ac31ed97e346106fd2ae2b1d459395b14a76e7e430365726a75e19339f37b2b0cc340c000950c3f35fe6866836e6224e392c71007ce5865783b1a5ed8336042be2bd94dcbff82b6155a7f712ec94e6f3576cf62f5c658fc7d2c9858811e954315535f140b02341f4c00c74e6009a24d05202f9425f04bf9cd042f3d5343ee7de2e4f43376448893d10e5ba53c9eb175582af1e899a6e1cccacef68d1b16392cec9e7ca7d82c836fa0889ef98fbf353a1db65e2bb95fb6ee4f039e5b267e31c470f9cf670fe0fafce5f9bf95952128bfab56492c7ef286b58c7ac03d8c1896207d460ba2c6ea767861277d6284bced5339d0a0583d2662b34bdedbe5fdea4c3a0aceb2898d893974242d4f5549edd5111f0fd1806b71aa51d40bc9b01720526b720eb7ff8e01d85c03d4907a97da8134b2c92ef4b8e8d6dad334e20d41a1044d038b199835d3ec88f2a9400b40947f5e04e360f3d8ab1c3eb4f8aba16f15b88887c614419e9695c6a8394fe69697068ac5494d95f2e8717da625d9f9f8fc71531caeb24ed7f59faa453f6f26b2078ef6fb5c8160613ee6b54b8063106144c57d4ed5c42b2e365c197843696584cf1ff2c253b98ffe602f567062eac1223a4963ef8806badedce527b2888988e5a04811f38ba8cc6ec076e7cce8b705de840f7ee923c21210b4b6ee43d9ec334451e180aa0bb498119bd9909d8336cbffbfff5bd36b34eaeffdf7916c862b9851f8e984dbdfa9392fa384f4927efeb2e77141eafb74503d0331b2c3f0b2b008dee6e8e57c67dd910e4dbb3ca2ac0370f06f947f779d1525d35c4715883fa3514ba50adb03451194fdb1fb99e0d355219bc8c7ea1113ccef2849b2195997aa7ffa9870cd2ff64457450409004c99cc79da01b2035e16095e3b0f27b77c0e8c6d686b2154e5e3beba0d305b07d56f9e476a225a4d22c49a4d6fe3e50c0fcaf191d9afb3fae41e48b9f17732d936109bfa742a1225561177c482328f7b5747b14adad4775e841f1c3cab2ad6a23bd1b5dcdcd42e3af6e7cf1f00f76457f6189df3a480096799db0c5bb8f28171bd3a5707497d8ede1f26b39cc4950b8a193c7cb67b34ea0d123196ee3a96dc36a4fad1420683cd5a8eab36b91a2a907aee421493e41020fd3144a0cf3f89f73f3ec0f04c217507562b781aa48b84c62c64101e882dedc2de5027e5424c461f82e46415a13b97df0599b5ce9f1e37361fc73028af0f70e9d6f9f2a42850d29b86252357c1905d03e2dbe7e5c2591d600cd4dd1454546b4674dc8d0ac23701d9faec5e0bde1e6ca824efff7bf48df9b95da1256adedbd9705f3083c862f87c22a9f4bb6c60b782284bc1086fe750974deb0275f732817ab4e76ea3b76aad03a025913131aa474c2793fd365df4324ad52be19b0877e46bcb19877858205de7bcbfd85928ff4869fd484d6e063a92151bf9b526afebd669704121d8a6b20ce3eb8becf3fdaef0c498c99518fc65cb1fce8ebf3e83c6f25ea5b0d63767a57991026d63a557e317f39f1a110356b183e6784b192af4349e02f5b161e0002c40551553af9aec1e381d4996398502c54033d77c09100c67aa252cbad542eefe42a32bc89eb5f31010516be55b4a3fb76a03969c48e53c26b88932805aa978f410145a02b8d85e04c3f8dabe01e1a2ee1e7e17623a9faf57731947ab79f18479a679939a21064706a793c39172fd72e0acaa957c41af3b5709285f5832055fb4eb59978a74deffd144438e02fd67f1e269d4bb1c342d9eaa0568a11d87abe05b349d42aa9b7fd2629a3ea8fdee11c5b81432f3cc7ad9fb029f0c64e156862807a1d4ee521a51111405e88ec662999d38e48c5f42c39e4ec87378131cd8b145979091c1fa60751b609b20899ca89546689cede8f875f198fc63115b38f52d6f1fb40568357570224da21cd114d8258cd4c14bef3e802c516753222a5bd7d0633d5c1c7a8c76ea6212fb677fab561bfc0918d31e0a1aa359d720414ead29fc196f415142d56d39215dabcfef6e08654e0488d630ce22d7607be286c72ae5e733ef243df10bd64030eaef521ee1613890a2a0ec895ada59a55687817abd841725c3c34830caaf9960dbb41d1b2b3017d7b8d24b667c678933543c8ab85a80083a38f443dfa77a3ffbad16ad9d810cf3a06e54edeaf3cff65ebe4c1a9de981a684be3436ece877e73aa284c74825e9b67d789eefbff0d80183929ebacfed7a1a044a3c84b1f074054886049b1c104336b577e265bda39568ed0fcc563a1114f0c5a450599dc151aee0e1666059a896fb580134c00f1d5c255c08a7126e02ed8ed789b8bcd7cc228dcb522bebfbbf64c4362e5d2aab29cb0aa16461912855d2bdb175aa2b4081bf629661cacf5b6fa080ad9d55b99c5c00616dbf509171515e18918e59ae39e0590ee5a8992c2d00bfe8ac74230baa0a2bd2b7db000c1cf4345036d345dca52810cd69c5a7e366d607b3ce8fd759e479afdbc02964e69d65d4b91bf7dd3c5e1f54c58df74d1738ba4c22f658a71bb60a3729877ec65e590782917d56e7f8881c0a170cf6520fac00d6f4973168c9b32e87a34e43cae41f7a3b496b58d2367a24dfd7e2c7d61ccdcd557c0c6e1ee7a0e61e12af4dfeb5b893cc3391ea052500492377db873e75441832dab8d9e74416089b5ca18fedcb41b03ecf02f9d62312197e6d3961e135e8c09c8ab7bc1617ffab6a61463eca4f08d460ba6bd6c02f251baee66b3c84fb3dc0fb29165e639323c683486ef97325f8508d1fa061a2bdff11cc32bf0fdc31a65976daed52da48dcca0cba6638dab377f4d1232608909d9820e48de5b3428fb7630030694fb663d6cfcb6aa49a06f69090c211230fe11a3f41b2c1296be9445495db22bd94de0dfa70e6c531707e14421e9180121a86a8178c5a781476d0d54fca4013442e3371535275bf6d8477cccd3017fcc85a79a98452b7f87ef250e61f5f9213024da438b2e1ae032c1f428e674dd58fa4f0b1ee9f2b2619cfb5fb9c36c5976ca1e6c7f028d04f822627a1dc5ed5ceb798ed00c42c8dffd5ff364725f13b76ac4791e98623fa2af20fd82cb11352ea90c4f440d80863a0b2f75ad9d66f5c0b16324e3c7dc2ba849be63792cf1c42c1b0cd76a7f15485656429c569dcce9f4bd510d521a1db4b37283b66224a3493d85e64960fb214ff47d80c9224c672ecb9174173234bc7532b95e257546ae59a10c1b6037af6e5962261dc7f59625631117fbe78c98d764fb3108089fd6aa5b2be6ca1173307fe437fdc7dda9c9b14f2074e04451620b2336f02532482edc9841a76e689fae899642fdf751577eea2c4e3e68c9fb46e23342e7821e3e8fe4be408be0adf79f25807a73c0a79268b48b370cbd84c0c77f8c654bd98861454a3c95704b389ef501c22e75c7888274ddd25ca55f901b6b3e2b4313e19ca2a66a02c84e20519d863aaf3c20dc9e5e4ea7e78cef70ee3dbf1ce26765000f600826a2b8f9d0047734cc6f622601324ace6e74f1d8a8aa4babe09efd216f41790bb9cfd6e4edee6f843cb49b8708a1c9c0b1ac11e901a8abdff5d7f609e06d6e12d9ad3a714ee11a24857663996c27752823bd0b3371019969ebd7", 0x1000, 0x9}, {&(0x7f0000001440)="1b2d350b1d15136c89f327262206cbba3b42c8d9bbf8b501fc20b0de615489e149ff6153d4694d2ae41a6c144b595b43a40d9b483c6acfdd1a864dec4798c0c087f64d616f66db9e3afd5f557e40b284d842706b65", 0x55, 0x6}, {&(0x7f00000014c0)="ce8ac888d78a9da3392d65ef423f4434e7924696b641ee3dcab32e70b32a281d254d0f044f47df52282a062ab4b06aabcb0206aa039b6324f872fa9528b555906ee2d1c745c3843f873f7c0d27b2ce4304615fc824747f1882183d8379c2d06785887c4f0fbbca5f6b6679b68e74bf9c5c15d4b4d81f713a9a5e0c86d1c3df64bb848a6ddaf6e0561e3845b52b662fe3267f8e0ad4079a5f9d9532a8f6502ec021fce55366ec50d9180adc80afb1422ed0866c52c63e10eb8619703030203d65aadc852a6e0379c7af231cf3d651f19d30a783a1f00f1490d66b069e0aa017d3cb3ac1a0099c4619b6a873193e", 0xed, 0x2}, {&(0x7f00000015c0)="2fe524980e4849fcfeb202352f685d1d165ddf03283b7cd95e0dbb7f31b5ac34913926ab11837d7fc8fa6675345a19db75724e8396ac3253ddf94a6d26", 0x3d, 0x2}, {&(0x7f0000001600)="961dbaf2254c0ce7f3522de940958fc1dbef04a6699abaa92fc95015753a7bd0fb90fd0c00438cb417191c8cc3a512600af063bbb632853cf0452f0d0bf02ce21770befb82e5f5bab8d27df9b77a1edbe7bf5aecfb92c181ff004159e3d814c283cfc70d7605d10dce95e335e0973176c09330a10c677466b354c2", 0x7b, 0x3}], 0x80, &(0x7f0000001780)='\\]mime_type\x00') sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0, 0x0}, &(0x7f0000001800)=0xc) lstat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r5) 13:03:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1328.538931] FAT-fs (loop2): Directory bread(block 128) failed [ 1328.572667] FAT-fs (loop2): Directory bread(block 129) failed 13:03:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000023, 0x0) [ 1328.591829] FAT-fs (loop2): Directory bread(block 130) failed [ 1328.604832] FAT-fs (loop2): Directory bread(block 131) failed 13:03:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ea, 0x0) [ 1328.637047] FAT-fs (loop2): Directory bread(block 132) failed [ 1328.662468] FAT-fs (loop2): Directory bread(block 133) failed 13:03:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000109, 0x0) 13:03:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1328.688435] FAT-fs (loop2): Directory bread(block 134) failed [ 1328.710155] FAT-fs (loop2): Directory bread(block 135) failed [ 1328.727180] FAT-fs (loop2): Directory bread(block 136) failed [ 1328.757464] FAT-fs (loop2): Directory bread(block 137) failed 13:03:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d1, 0x0) [ 1328.908386] attempt to access beyond end of device [ 1328.913453] loop2: rw=2049, want=310, limit=128 [ 1328.918171] buffer_io_error: 14 callbacks suppressed [ 1328.918182] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1328.971783] attempt to access beyond end of device [ 1328.976836] loop2: rw=2049, want=311, limit=128 [ 1328.981582] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1329.008917] attempt to access beyond end of device [ 1329.013964] loop2: rw=2049, want=312, limit=128 [ 1329.018687] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1329.041092] attempt to access beyond end of device [ 1329.046128] loop2: rw=2049, want=313, limit=128 [ 1329.050825] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1329.104598] attempt to access beyond end of device [ 1329.109638] loop2: rw=2049, want=326, limit=128 [ 1329.114352] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1329.144070] attempt to access beyond end of device [ 1329.149115] loop2: rw=2049, want=327, limit=128 [ 1329.153855] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1329.174314] attempt to access beyond end of device [ 1329.179419] loop2: rw=2049, want=328, limit=128 [ 1329.184191] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1329.214340] attempt to access beyond end of device [ 1329.219401] loop2: rw=2049, want=329, limit=128 [ 1329.224134] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1329.245973] attempt to access beyond end of device [ 1329.251086] loop2: rw=2049, want=2153, limit=128 13:03:56 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) 13:03:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x1a7, 0x6]) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000006e, 0x0) 13:03:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e3, 0x0) 13:03:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x8000000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:56 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000140)={'bcsf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 13:03:56 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x618, 0xfffffffffffffffe}) 13:03:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1329.549991] FAT-fs (loop2): Directory bread(block 128) failed [ 1329.577599] FAT-fs (loop2): Directory bread(block 129) failed [ 1329.600096] FAT-fs (loop2): Directory bread(block 130) failed [ 1329.620053] FAT-fs (loop2): Directory bread(block 131) failed [ 1329.639167] FAT-fs (loop2): Directory bread(block 132) failed 13:03:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000002d, 0x0) 13:03:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000000b, 0x0) [ 1329.659246] FAT-fs (loop2): Directory bread(block 133) failed [ 1329.685161] FAT-fs (loop2): Directory bread(block 134) failed [ 1329.706598] FAT-fs (loop2): Directory bread(block 135) failed 13:03:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000f6, 0x0) 13:03:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000005c, 0x0) [ 1329.738633] FAT-fs (loop2): Directory bread(block 136) failed [ 1329.769177] FAT-fs (loop2): Directory bread(block 137) failed [ 1329.943087] attempt to access beyond end of device [ 1329.948145] loop2: rw=2049, want=310, limit=128 [ 1329.952866] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1329.998056] attempt to access beyond end of device [ 1330.003092] loop2: rw=2049, want=311, limit=128 [ 1330.007827] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1330.035056] attempt to access beyond end of device [ 1330.040101] loop2: rw=2049, want=312, limit=128 [ 1330.053963] attempt to access beyond end of device [ 1330.059001] loop2: rw=2049, want=313, limit=128 [ 1330.067624] attempt to access beyond end of device [ 1330.072634] loop2: rw=2049, want=326, limit=128 [ 1330.092121] attempt to access beyond end of device [ 1330.097151] loop2: rw=2049, want=327, limit=128 [ 1330.110149] attempt to access beyond end of device [ 1330.115183] loop2: rw=2049, want=328, limit=128 [ 1330.127079] attempt to access beyond end of device [ 1330.132104] loop2: rw=2049, want=329, limit=128 13:03:57 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1330.159187] attempt to access beyond end of device [ 1330.164229] loop2: rw=2049, want=2153, limit=128 [ 1330.189961] attempt to access beyond end of device [ 1330.195063] loop2: rw=2049, want=2154, limit=128 [ 1330.207545] attempt to access beyond end of device [ 1330.212594] loop2: rw=2049, want=2154, limit=128 13:03:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0x80, 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x40) epoll_create(0x101) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e23, @rand_addr=0xffffffffffffffff}}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:03:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a0, 0x0) 13:03:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000117, 0x0) 13:03:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x200000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:57 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xc909000000000000, 0xfffffffffffffffe}) 13:03:57 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1330.729530] FAT-fs (loop2): Directory bread(block 128) failed [ 1330.752252] FAT-fs (loop2): Directory bread(block 129) failed 13:03:58 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) times(&(0x7f0000000100)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) 13:03:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008f, 0x0) 13:03:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000156, 0x0) [ 1330.778042] FAT-fs (loop2): Directory bread(block 130) failed [ 1330.791861] FAT-fs (loop2): Directory bread(block 131) failed 13:03:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1330.825875] FAT-fs (loop2): Directory bread(block 132) failed [ 1330.844888] FAT-fs (loop2): Directory bread(block 133) failed [ 1330.863257] FAT-fs (loop2): Directory bread(block 134) failed [ 1330.871471] FAT-fs (loop2): Directory bread(block 135) failed 13:03:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1330.905393] FAT-fs (loop2): Directory bread(block 136) failed [ 1330.939669] FAT-fs (loop2): Directory bread(block 137) failed 13:03:58 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x44) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:03:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000077, 0x0) [ 1331.107727] attempt to access beyond end of device [ 1331.112781] loop2: rw=2049, want=310, limit=128 [ 1331.137783] attempt to access beyond end of device [ 1331.142887] loop2: rw=2049, want=311, limit=128 [ 1331.160857] attempt to access beyond end of device [ 1331.165883] loop2: rw=2049, want=312, limit=128 [ 1331.183768] attempt to access beyond end of device [ 1331.188815] loop2: rw=2049, want=313, limit=128 [ 1331.208679] attempt to access beyond end of device [ 1331.213699] loop2: rw=2049, want=326, limit=128 [ 1331.218559] attempt to access beyond end of device [ 1331.223533] loop2: rw=2049, want=327, limit=128 [ 1331.246515] attempt to access beyond end of device [ 1331.251535] loop2: rw=2049, want=328, limit=128 [ 1331.273292] attempt to access beyond end of device [ 1331.278353] loop2: rw=2049, want=329, limit=128 [ 1331.294307] attempt to access beyond end of device [ 1331.299315] loop2: rw=2049, want=2153, limit=128 [ 1331.318268] attempt to access beyond end of device [ 1331.323284] loop2: rw=2049, want=2154, limit=128 [ 1331.342376] attempt to access beyond end of device [ 1331.347401] loop2: rw=2049, want=2154, limit=128 13:03:59 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x2) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) setrlimit(0xc, &(0x7f0000000080)={0x59a, 0x1}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:03:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000010, 0x0) 13:03:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000003a, 0x0) 13:03:59 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x7c03, 0xfffffffffffffffe}) 13:03:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x4800000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:03:59 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000000c0)={0x5, 0x0, [{}, {}, {}, {}, {}]}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 13:03:59 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xff, 0x200000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0xee, 0x9, "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", 0xe9, 0x7fffffff, 0x670, 0x240000000000, 0x9, 0x8, 0xfffffffffffffff8, 0x1}, r1}}, 0x120) r2 = getpid() sched_setattr(r2, &(0x7f0000000080), 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x40002017}) timerfd_settime(r5, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000021ff4)={0x2001}) 13:03:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000fb, 0x0) [ 1331.758620] FAT-fs (loop2): Directory bread(block 128) failed [ 1331.791218] FAT-fs (loop2): Directory bread(block 129) failed [ 1331.798017] FAT-fs (loop2): Directory bread(block 130) failed 13:03:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e9, 0x0) 13:03:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000003b, 0x0) 13:03:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:03:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a9, 0x0) [ 1331.818094] FAT-fs (loop2): Directory bread(block 131) failed [ 1331.849129] FAT-fs (loop2): Directory bread(block 132) failed [ 1331.885262] FAT-fs (loop2): Directory bread(block 133) failed [ 1331.913716] FAT-fs (loop2): Directory bread(block 134) failed [ 1331.925866] FAT-fs (loop2): Directory bread(block 135) failed 13:03:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000006c, 0x0) [ 1331.959841] FAT-fs (loop2): Directory bread(block 136) failed [ 1331.978572] FAT-fs (loop2): Directory bread(block 137) failed [ 1332.126135] attempt to access beyond end of device [ 1332.131191] loop2: rw=2049, want=310, limit=128 [ 1332.137663] attempt to access beyond end of device [ 1332.142733] loop2: rw=2049, want=311, limit=128 [ 1332.157948] attempt to access beyond end of device [ 1332.163040] loop2: rw=2049, want=312, limit=128 [ 1332.173324] attempt to access beyond end of device [ 1332.178415] loop2: rw=2049, want=313, limit=128 [ 1332.189802] attempt to access beyond end of device [ 1332.194978] loop2: rw=2049, want=326, limit=128 [ 1332.207576] attempt to access beyond end of device [ 1332.212668] loop2: rw=2049, want=327, limit=128 [ 1332.226462] attempt to access beyond end of device [ 1332.231537] loop2: rw=2049, want=328, limit=128 [ 1332.245102] attempt to access beyond end of device [ 1332.250133] loop2: rw=2049, want=329, limit=128 [ 1332.265362] attempt to access beyond end of device [ 1332.270495] loop2: rw=2049, want=2153, limit=128 [ 1332.290554] attempt to access beyond end of device [ 1332.295634] loop2: rw=2049, want=2154, limit=128 [ 1332.314845] attempt to access beyond end of device [ 1332.319957] loop2: rw=2049, want=2157, limit=128 13:04:00 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x40) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000014e, 0x0) 13:04:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e4, 0x0) 13:04:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xfbffffff00000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:00 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:04:00 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x8904, 0xfffffffffffffffe}) [ 1332.791885] FAT-fs (loop2): Directory bread(block 128) failed [ 1332.832082] FAT-fs (loop2): Directory bread(block 129) failed [ 1332.844257] FAT-fs (loop2): Directory bread(block 130) failed [ 1332.864149] FAT-fs (loop2): Directory bread(block 131) failed 13:04:00 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000087, 0x0) [ 1332.878129] FAT-fs (loop2): Directory bread(block 132) failed [ 1332.890824] FAT-fs (loop2): Directory bread(block 133) failed 13:04:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000013, 0x0) [ 1332.922633] FAT-fs (loop2): Directory bread(block 134) failed [ 1332.951964] FAT-fs (loop2): Directory bread(block 135) failed [ 1332.961290] FAT-fs (loop2): Directory bread(block 136) failed [ 1332.969134] FAT-fs (loop2): Directory bread(block 137) failed 13:04:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d5, 0x0) 13:04:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e4, 0x0) 13:04:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1333.138824] attempt to access beyond end of device [ 1333.143897] loop2: rw=2049, want=290, limit=128 [ 1333.173160] attempt to access beyond end of device [ 1333.178245] loop2: rw=2049, want=291, limit=128 [ 1333.199817] attempt to access beyond end of device [ 1333.204931] loop2: rw=2049, want=292, limit=128 [ 1333.235534] attempt to access beyond end of device [ 1333.240650] loop2: rw=2049, want=293, limit=128 [ 1333.275728] attempt to access beyond end of device [ 1333.280839] loop2: rw=2049, want=310, limit=128 [ 1333.299049] attempt to access beyond end of device [ 1333.304122] loop2: rw=2049, want=311, limit=128 [ 1333.319806] attempt to access beyond end of device [ 1333.324867] loop2: rw=2049, want=312, limit=128 [ 1333.329864] attempt to access beyond end of device [ 1333.334890] loop2: rw=2049, want=313, limit=128 [ 1333.341536] attempt to access beyond end of device [ 1333.346570] loop2: rw=2049, want=2157, limit=128 13:04:01 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl(r0, 0xffffffff00000001, &(0x7f0000000340)="78bee0a5a29684948685c0ce51589edec39ce39022a0fe8a5eb8f3f8aa11a04c0c32c726471a9c0e5915b76febcee693806894baa579a3511639f69a568b4ce82661081919141efcaab028d3186bcddebe58f3bc995a3f4482cd3406160798e21ebe80c6565919a2de56e3d6ba6a240f8beb35533a8110ee7d286de85b718816b969f19f9d493e3954b4c18d94f13dab5d30c0dd334b53cce6576a5ff42f6ef7a1c50517c878a1a2ad9a4be61603843a88f6e0e0e19e8ecdaf96f105ce717922e32a1f2f20c795ec816727802a9ad2a6f6b6250a1a22500bd3f03253a21652ea60ed2f77cc3f9a2a135d06b0e9faf31ceb4bd172") r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x40000000002001}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x420000, 0x0) accept$alg(r4, 0x0, 0x0) 13:04:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ea, 0x0) 13:04:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xffffff0f, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000bd, 0x0) 13:04:01 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x6ab, 0xfffffffffffffffe}) 13:04:01 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x40000) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfffffffffffffd59) [ 1333.864579] FAT-fs (loop2): Directory bread(block 128) failed [ 1333.884769] FAT-fs (loop2): Directory bread(block 129) failed 13:04:01 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x10000000}) r4 = semget(0x1, 0x3, 0x200) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x7fff, 0x4, 0x9225]) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f0000000100)={0x78}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e0, 0x0) 13:04:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000003e, 0x0) 13:04:01 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x80000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x109000) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000200)={0x53, 0x8, 0x5, {0x6, 0x8}, {0xfffffffffffffffe, 0x4}, @rumble={0x101, 0x15b8}}) sendfile(r0, r1, &(0x7f00000001c0), 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101000, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000080)={0xffffffff7ffffff9}) write$P9_RUNLINKAT(r3, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r4, 0x40086602, &(0x7f00000000c0)=ANY=[]) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x30) write$cgroup_type(r5, &(0x7f0000000280)='threaded\x00', 0x9) [ 1333.916257] FAT-fs (loop2): Directory bread(block 130) failed [ 1333.947300] FAT-fs (loop2): Directory bread(block 131) failed [ 1333.958519] FAT-fs (loop2): Directory bread(block 132) failed 13:04:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1334.011938] FAT-fs (loop2): Directory bread(block 133) failed [ 1334.036547] FAT-fs (loop2): Directory bread(block 134) failed 13:04:01 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 13:04:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000134, 0x0) [ 1334.073011] FAT-fs (loop2): Directory bread(block 135) failed [ 1334.084163] FAT-fs (loop2): Directory bread(block 136) failed [ 1334.091826] FAT-fs (loop2): Directory bread(block 137) failed [ 1334.241043] attempt to access beyond end of device [ 1334.246098] loop2: rw=2049, want=310, limit=128 [ 1334.250803] buffer_io_error: 30 callbacks suppressed [ 1334.250814] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1334.284727] attempt to access beyond end of device [ 1334.289773] loop2: rw=2049, want=311, limit=128 [ 1334.294483] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1334.319740] attempt to access beyond end of device [ 1334.324807] loop2: rw=2049, want=312, limit=128 [ 1334.329535] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1334.354985] attempt to access beyond end of device [ 1334.360048] loop2: rw=2049, want=313, limit=128 [ 1334.364785] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1334.373194] attempt to access beyond end of device [ 1334.378234] loop2: rw=2049, want=326, limit=128 [ 1334.382967] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1334.391336] attempt to access beyond end of device [ 1334.396374] loop2: rw=2049, want=327, limit=128 [ 1334.401111] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1334.411650] attempt to access beyond end of device [ 1334.416704] loop2: rw=2049, want=328, limit=128 [ 1334.421419] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1334.430656] attempt to access beyond end of device [ 1334.436670] loop2: rw=2049, want=329, limit=128 [ 1334.441387] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1334.451448] attempt to access beyond end of device [ 1334.456487] loop2: rw=2049, want=2153, limit=128 13:04:02 executing program 0: r0 = epoll_create1(0x80003) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002017}) timerfd_settime(r1, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2200) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000200)={0x0, 0xa0be, 0x5, &(0x7f00000001c0)=0xfffffffffffffffe}) ioctl$TIOCCONS(r2, 0x541d) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000021ff4)={0x2001}) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000140)=0x3) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000180)={0x5, 0x79, 0xff}) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'ifb0\x00', 0x2}) 13:04:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000065, 0x0) 13:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008e, 0x0) 13:04:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x20000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:02 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x7c020000, 0xfffffffffffffffe}) 13:04:02 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000100)=ANY=[@ANYBLOB="26ea2dc3"]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) r2 = pkey_alloc(0x0, 0x1) pkey_free(r2) [ 1334.876457] FAT-fs (loop2): Directory bread(block 128) failed [ 1334.897903] FAT-fs (loop2): Directory bread(block 129) failed [ 1334.928880] FAT-fs (loop2): Directory bread(block 130) failed [ 1334.942287] FAT-fs (loop2): Directory bread(block 131) failed [ 1334.953871] FAT-fs (loop2): Directory bread(block 132) failed [ 1334.966463] FAT-fs (loop2): Directory bread(block 133) failed [ 1334.979393] FAT-fs (loop2): Directory bread(block 134) failed [ 1334.992091] FAT-fs (loop2): Directory bread(block 135) failed [ 1335.002556] FAT-fs (loop2): Directory bread(block 136) failed [ 1335.014059] FAT-fs (loop2): Directory bread(block 137) failed 13:04:02 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x10) r1 = epoll_create1(0x0) readahead(r1, 0xff, 0x5) r2 = epoll_create1(0x80008) r3 = timerfd_create(0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x4080, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x11, "e37de8d90a7b8386f68da7f315b1366b62"}, &(0x7f0000000200)=0x19) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={r5, 0xc8, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x4, @empty, 0x4}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x20}, 0x10001}, @in6={0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in6={0xa, 0x4e23, 0x8857, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e24, 0x5, @empty, 0x3cdf7b8d}, @in6={0xa, 0x4e20, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x9}]}, &(0x7f0000000280)=0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000440)) 13:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000df, 0x0) 13:04:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x3, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)={0x2001}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x220002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x3, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x800}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}], 0x2c) 13:04:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d2, 0x0) [ 1335.092613] attempt to access beyond end of device [ 1335.097695] loop2: rw=2049, want=310, limit=128 [ 1335.102436] Buffer I/O error on dev loop2, logical block 309, lost async page write 13:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1335.157573] attempt to access beyond end of device [ 1335.162685] loop2: rw=2049, want=311, limit=128 [ 1335.167411] Buffer I/O error on dev loop2, logical block 310, lost async page write 13:04:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000061, 0x0) 13:04:02 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000001c0)=""/23) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040)={0x50000000}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r4 = fcntl$dupfd(r1, 0x0, r3) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000100)={0x0, 0x8, [0x101, 0x2]}) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3, 0x80000) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000140)={0x2005}) 13:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1335.205094] attempt to access beyond end of device [ 1335.210152] loop2: rw=2049, want=312, limit=128 13:04:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000024, 0x0) 13:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1335.284081] attempt to access beyond end of device [ 1335.289127] loop2: rw=2049, want=313, limit=128 [ 1335.314094] attempt to access beyond end of device [ 1335.319173] loop2: rw=2049, want=326, limit=128 13:04:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000fa, 0x0) 13:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1335.353111] attempt to access beyond end of device [ 1335.358176] loop2: rw=2049, want=327, limit=128 [ 1335.384418] attempt to access beyond end of device [ 1335.389481] loop2: rw=2049, want=328, limit=128 [ 1335.397626] attempt to access beyond end of device [ 1335.402696] loop2: rw=2049, want=329, limit=128 [ 1335.461613] attempt to access beyond end of device [ 1335.466681] loop2: rw=2049, want=2153, limit=128 13:04:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xc0000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1335.607356] FAT-fs (loop2): Directory bread(block 128) failed [ 1335.619124] FAT-fs (loop2): Directory bread(block 129) failed [ 1335.630730] FAT-fs (loop2): Directory bread(block 130) failed [ 1335.641370] FAT-fs (loop2): Directory bread(block 131) failed 13:04:02 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x5e00, 0xfffffffffffffffe}) [ 1335.651936] FAT-fs (loop2): Directory bread(block 132) failed [ 1335.663586] FAT-fs (loop2): Directory bread(block 133) failed [ 1335.685170] FAT-fs (loop2): Directory bread(block 134) failed [ 1335.697144] FAT-fs (loop2): Directory bread(block 135) failed [ 1335.709617] FAT-fs (loop2): Directory bread(block 136) failed [ 1335.720224] FAT-fs (loop2): Directory bread(block 137) failed 13:04:03 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") ioctl$fiemap(r0, 0x40086602, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYBLOB="6a1be2697ff2c3c1786996c1eb03933224ebb74536b1279ddf91d19858f4cabff8baa7d1285b875952c4aeef89824650136b52b071168514d418de056e79d3ade84b102060ce645d43416d27ad7e5d8e0dabf151fdd0dfc577b5c387e6b8f86b9a0954ec0eec8ef6ac793b3ac95500ea1197e60ee96ed56c241fd5275bbd", @ANYPTR=&(0x7f0000001740)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="0ff8ae7ed7a8cb6fe791d287f5687be6269d3f8f5e56428236c34ae588", @ANYRESHEX=r0], @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], @ANYPTR=&(0x7f0000001700)=ANY=[], @ANYRESDEC=r0], @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES64=r0], @ANYRES32=r0, @ANYRES64=r0, @ANYRES32], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], @ANYRESHEX=r0, @ANYRES16=r0]) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x0, 0x2}, 0x9}}, 0x18) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:04:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000014, 0x0) 13:04:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000de, 0x0) [ 1335.851869] attempt to access beyond end of device [ 1335.856940] loop2: rw=2049, want=310, limit=128 [ 1335.879861] attempt to access beyond end of device [ 1335.884973] loop2: rw=2049, want=311, limit=128 [ 1335.904474] attempt to access beyond end of device [ 1335.909545] loop2: rw=2049, want=312, limit=128 [ 1335.916516] attempt to access beyond end of device [ 1335.921579] loop2: rw=2049, want=313, limit=128 [ 1335.926513] attempt to access beyond end of device [ 1335.931538] loop2: rw=2049, want=326, limit=128 [ 1335.936466] attempt to access beyond end of device [ 1335.941503] loop2: rw=2049, want=327, limit=128 [ 1335.946464] attempt to access beyond end of device [ 1335.951497] loop2: rw=2049, want=328, limit=128 [ 1335.956697] attempt to access beyond end of device [ 1335.961734] loop2: rw=2049, want=329, limit=128 [ 1335.968466] attempt to access beyond end of device [ 1335.973512] loop2: rw=2049, want=2153, limit=128 13:04:03 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x8000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x0, 0x4) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000100)={'tunl0\x00', 0xfffffffffffffffa}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000003c, 0x0) 13:04:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000fc, 0x0) 13:04:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:03 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/102, 0x66) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) flistxattr(r1, &(0x7f0000000100)=""/87, 0x57) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000039, 0x0) 13:04:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000006b, 0x0) 13:04:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1336.331218] FAT-fs (loop2): Directory bread(block 128) failed [ 1336.356945] FAT-fs (loop2): Directory bread(block 129) failed 13:04:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000103, 0x0) [ 1336.383086] FAT-fs (loop2): Directory bread(block 130) failed [ 1336.416474] FAT-fs (loop2): Directory bread(block 131) failed [ 1336.435748] FAT-fs (loop2): Directory bread(block 132) failed [ 1336.453922] FAT-fs (loop2): Directory bread(block 133) failed [ 1336.471250] FAT-fs (loop2): Directory bread(block 134) failed [ 1336.486117] FAT-fs (loop2): Directory bread(block 135) failed [ 1336.509171] FAT-fs (loop2): Directory bread(block 136) failed 13:04:03 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x4302, 0xfffffffffffffffe}) 13:04:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000eb, 0x0) 13:04:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000142, 0x0) [ 1336.539089] FAT-fs (loop2): Directory bread(block 137) failed 13:04:03 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0]) r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x40) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @rand_addr=0x200, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x1}}}, {{@arp={@multicast1=0xe0000001, @empty, 0xff0000ff, 0xffffff00, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, {[0xff, 0xff, 0xff, 0xff]}, @mac=@random="75f0eafd5059", {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x101, 0x2, 0x5, 0x8, 0xc0, 0x74eee813, 'team_slave_1\x00', 'bcsh0\x00', {}, {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) [ 1336.656383] attempt to access beyond end of device [ 1336.661816] loop2: rw=2049, want=310, limit=128 [ 1336.684951] attempt to access beyond end of device [ 1336.690050] loop2: rw=2049, want=311, limit=128 [ 1336.712320] attempt to access beyond end of device [ 1336.717400] loop2: rw=2049, want=312, limit=128 [ 1336.739932] attempt to access beyond end of device [ 1336.744992] loop2: rw=2049, want=313, limit=128 [ 1336.759604] attempt to access beyond end of device [ 1336.764657] loop2: rw=2049, want=326, limit=128 [ 1336.780410] attempt to access beyond end of device [ 1336.785470] loop2: rw=2049, want=327, limit=128 [ 1336.801128] attempt to access beyond end of device [ 1336.806172] loop2: rw=2049, want=328, limit=128 [ 1336.811005] attempt to access beyond end of device [ 1336.816065] loop2: rw=2049, want=329, limit=128 [ 1336.828993] attempt to access beyond end of device [ 1336.834060] loop2: rw=2049, want=2153, limit=128 [ 1336.856268] attempt to access beyond end of device [ 1336.861328] loop2: rw=2049, want=2154, limit=128 [ 1336.880914] attempt to access beyond end of device [ 1336.885979] loop2: rw=2049, want=2154, limit=128 13:04:04 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) clock_gettime(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000100)={{r3, r4+30000000}, {0x77359400}}, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x80000000000b26a, &(0x7f00000000c0)={0x20000000000000}, 0xffffffffffffffd2) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0xa001}) 13:04:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:04 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xffffffffffffff69) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1) 13:04:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000000e, 0x0) 13:04:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007b, 0x0) 13:04:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x7400, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1337.254925] FAT-fs (loop2): Directory bread(block 128) failed [ 1337.273103] FAT-fs (loop2): Directory bread(block 129) failed [ 1337.283541] FAT-fs (loop2): Directory bread(block 130) failed [ 1337.292220] FAT-fs (loop2): Directory bread(block 131) failed [ 1337.305094] FAT-fs (loop2): Directory bread(block 132) failed [ 1337.318340] FAT-fs (loop2): Directory bread(block 133) failed [ 1337.331477] FAT-fs (loop2): Directory bread(block 134) failed 13:04:04 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x1}) clock_gettime(0x0, &(0x7f0000000280)) timerfd_settime(r3, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="920000002446dcfe6d7fa1ae915058000076bc380532f6340d7b0292478e0a43aaa118bc5e64dccf99d190d7bb831bfcbc67abe6eedfb7364b4cc2a79bee1527e17db76908a93a7b2be7f36af3e26728c12b7969b4c61239f4d60719554df79cbffaace830802e1b90d230511fdedbb2a67e873dde7928c732e98470c5161ea983131aabbef36350c730d3ab61d8c99ebcb8c36fee2a24120edffb1f99b0ba8ee31a2c9eeba0e74287a6adeac8cc2cfb44baf90f7b11e6e256dbc08b1c1929947b72237aad47584d3c"], &(0x7f0000000200)=0x9a) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r4, 0x3}, 0x8) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x6000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:04 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xa407, 0xfffffffffffffffe}) 13:04:04 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYBLOB="0bfe3a9fb7837c79d1459e55905e91c985697799c102f635eabb2d4423d825e26337e784f8587ed0fdcd721eb2f148f3cc16bc7373af7a70fad6eaa33be2a71fb12a04818b55a9b5b20e89fa6a3ec3fd06bd35f93aaa60261ece161985351e9e0b212c5acc7c717a04055a9cb1b579ea269ead6dbff5843cd7ace25d9db422a23972a75e0b8cc393a47ac03886141deea8438ec0e983b148f34defb79cca071e3ff12dd8ba2a9f2c2d86d5e5470863357df8caad231be8a1e299b147d326605b17ad5a81801347f0e096000000000000000000000000007c006042e8ea334489d8a28de5f791316b1bcb388ea7eec26c", @ANYRESDEC=r0, @ANYRESHEX=0x0]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file1\x00'}, 0x6e) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4000, 0x0) 13:04:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000067, 0x0) 13:04:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000013e, 0x0) [ 1337.359811] FAT-fs (loop2): Directory bread(block 135) failed 13:04:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:04 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x8}}, 0x10) [ 1337.405567] FAT-fs (loop2): Directory bread(block 136) failed [ 1337.425553] FAT-fs (loop2): Directory bread(block 137) failed 13:04:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000005a, 0x0) 13:04:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1337.630355] device bridge_slave_1 left promiscuous mode [ 1337.635169] attempt to access beyond end of device [ 1337.635923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.640849] loop2: rw=2049, want=310, limit=128 [ 1337.686277] attempt to access beyond end of device [ 1337.691424] loop2: rw=2049, want=311, limit=128 [ 1337.696792] device bridge_slave_0 left promiscuous mode [ 1337.702424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.709838] attempt to access beyond end of device [ 1337.714906] loop2: rw=2049, want=312, limit=128 [ 1337.721164] attempt to access beyond end of device [ 1337.726218] loop2: rw=2049, want=313, limit=128 [ 1337.731166] attempt to access beyond end of device [ 1337.736202] loop2: rw=2049, want=326, limit=128 [ 1337.755611] attempt to access beyond end of device [ 1337.760705] loop2: rw=2049, want=327, limit=128 [ 1337.773551] team0 (unregistering): Port device team_slave_1 removed [ 1337.779095] attempt to access beyond end of device [ 1337.785113] loop2: rw=2049, want=328, limit=128 [ 1337.790265] team0 (unregistering): Port device team_slave_0 removed [ 1337.807238] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1337.808414] attempt to access beyond end of device [ 1337.819358] loop2: rw=2049, want=329, limit=128 [ 1337.831013] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1337.845712] attempt to access beyond end of device [ 1337.850761] loop2: rw=2049, want=2153, limit=128 [ 1337.879135] bond0 (unregistering): Released all slaves 13:04:05 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000100)=""/209, &(0x7f0000000200)=0xd1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000113, 0x0) 13:04:05 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000400)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/188, 0xbc}], 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000300)={[0xffffffff, 0x8000, 0x5, 0x80, 0x4, 0x3, 0xda79, 0x1, 0x40, 0x0, 0x200, 0x7, 0x3, 0x6, 0x8, 0x5], 0xd000}) 13:04:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000152, 0x0) 13:04:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x7a00, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 1338.226678] FAT-fs (loop2): Directory bread(block 128) failed [ 1338.252263] FAT-fs (loop2): Directory bread(block 129) failed [ 1338.290108] FAT-fs (loop2): Directory bread(block 130) failed [ 1338.309164] FAT-fs (loop2): Directory bread(block 131) failed [ 1338.316438] FAT-fs (loop2): Directory bread(block 132) failed [ 1338.324779] FAT-fs (loop2): Directory bread(block 133) failed [ 1338.336174] IPVS: ftp: loaded support on port[0] = 21 [ 1338.341597] FAT-fs (loop2): Directory bread(block 134) failed [ 1338.356011] FAT-fs (loop2): Directory bread(block 135) failed [ 1338.374932] FAT-fs (loop2): Directory bread(block 136) failed 13:04:05 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0x100) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000140)) 13:04:05 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xa20, 0xfffffffffffffffe}) 13:04:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c2, 0x0) 13:04:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000127, 0x0) [ 1338.387569] FAT-fs (loop2): Directory bread(block 137) failed 13:04:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000001d, 0x0) 13:04:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1338.547118] attempt to access beyond end of device [ 1338.552177] loop2: rw=2049, want=310, limit=128 [ 1338.569153] attempt to access beyond end of device [ 1338.574197] loop2: rw=2049, want=311, limit=128 13:04:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000075, 0x0) [ 1338.605466] attempt to access beyond end of device [ 1338.610574] loop2: rw=2049, want=312, limit=128 [ 1338.631101] attempt to access beyond end of device [ 1338.636135] loop2: rw=2049, want=313, limit=128 13:04:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1338.673793] attempt to access beyond end of device [ 1338.678853] loop2: rw=2049, want=326, limit=128 [ 1338.697770] attempt to access beyond end of device [ 1338.702833] loop2: rw=2049, want=327, limit=128 [ 1338.732906] attempt to access beyond end of device [ 1338.737971] loop2: rw=2049, want=328, limit=128 [ 1338.776369] attempt to access beyond end of device [ 1338.781444] loop2: rw=2049, want=329, limit=128 [ 1338.815161] attempt to access beyond end of device [ 1338.820222] loop2: rw=2049, want=2153, limit=128 13:04:06 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x8}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) write$binfmt_aout(r1, &(0x7f0000000100)={{0x10f, 0x3, 0x6, 0x1ea, 0x148, 0x7ff, 0x1d2, 0xfff}, "b8c26a7f64e29e8d581940747a7e0cb80d3756ad7875d0473a2cd689b6e0d6406b7ec1d5db266f932b70457420c7221a6d7199c687d4eb0aee76fee3765be5c522afa12edcc7356c16f3f99088ff0ad5381c77cb01495ab01633be8b6ecf4f600e6a355f5e95c67bdbd6221cd3772e68811a1c07b0ba18fd11354df4cacf1386e8d7f68495469b63cf17eb1f0f2d14157655f24f87f4e0e81d16a747cc262ad2bbff66f77c4edfeb7717aa300a7dddcabe544eba2b98bdc55baa213655346dee40b46b732a"}, 0xe5) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c4, 0x0) 13:04:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1339.459014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.465622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.478687] device bridge_slave_0 entered promiscuous mode [ 1339.510266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.516679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.524167] device bridge_slave_1 entered promiscuous mode [ 1339.555423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1339.586286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1339.678231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1339.713546] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1339.859337] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1339.866665] team0: Port device team_slave_0 added [ 1339.898502] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1339.906529] team0: Port device team_slave_1 added [ 1339.937246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1339.972102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1340.006518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1340.013692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1340.028397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1340.055836] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1340.063114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1340.071395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1340.393390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.399797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.406433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.412799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.420174] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1340.544104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1341.521695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.629147] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1341.731596] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1341.737845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1341.751165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1341.852085] 8021q: adding VLAN 0 to HW filter on device team0 13:04:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000003c, 0x0) 13:04:10 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xffffffffffffff59) 13:04:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:10 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x1ee, 0xfffffffffffffffe}) 13:04:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000012b, 0x0) 13:04:10 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x9, 0x18000) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000180)) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) eventfd(0x4) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101000, 0x0) accept$alg(r5, 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1555555555555314, 0x7f, &(0x7f00009d2000), 0x1ba) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:04:10 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x232000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='teql0\x00', 0x10) 13:04:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1342.787882] FAT-fs (loop2): Directory bread(block 128) failed [ 1342.796120] FAT-fs (loop2): Directory bread(block 129) failed [ 1342.812885] FAT-fs (loop2): Directory bread(block 130) failed 13:04:10 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0xf000, 0x1000}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@local, @multicast1, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000a80)=0xe8) accept4$packet(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000b00)=0x14, 0x80800) accept$packet(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b80)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @multicast1, @remote}, &(0x7f0000000c00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000d40)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000e40)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000000e80)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000012c0)={@mcast2, 0x0}, &(0x7f0000001300)=0x14) accept$packet(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000014c0)=0xe8) recvmsg(r0, &(0x7f0000001980)={&(0x7f0000001500)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001580)=""/216, 0xd8}, {&(0x7f0000001680)=""/39, 0x27}, {&(0x7f00000016c0)=""/216, 0xd8}, {&(0x7f00000017c0)=""/130, 0x82}], 0x4, &(0x7f00000018c0)=""/131, 0x83, 0x80000001}, 0x40000100) getpeername$packet(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001a00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000001a40)={@mcast1, 0x0}, &(0x7f0000001a80)=0x14) getpeername(r0, &(0x7f0000001ac0)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000001b40)=0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001bc0)={0x0, @multicast1}, &(0x7f0000001c00)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000001c40)={@remote, 0x0}, &(0x7f0000001c80)=0x14) getpeername$packet(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001d00)=0x14) getpeername$packet(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001d80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001f00)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000002000)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0_to_team\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002080)={0x0, @rand_addr, @multicast1}, &(0x7f00000020c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000024c0)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000025c0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002600)={0x0, @empty, @dev}, &(0x7f0000002640)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000003100)={&(0x7f0000002680)={0xa5c, r1, 0x2, 0x70bd25, 0x25dfdbfb, {0x1}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x200}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r4}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x260, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xbbe}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa000000000000000}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x779d}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3ff}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xaf0}}}]}}, {{0x8, 0x1, r10}, {0x1b0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xb3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5ce}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0xec, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r17}, {0x1ac, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3e2d}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r20}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r21}, {0x16c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xf1}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r22}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0xfc, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7fff}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}]}}]}, 0xa5c}, 0x1, 0x0, 0x0, 0x40}, 0x14) r27 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r27, 0x40086602, &(0x7f00000000c0)=ANY=[]) r28 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r28, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) [ 1342.849642] FAT-fs (loop2): Directory bread(block 131) failed 13:04:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000013e, 0x0) [ 1342.894116] FAT-fs (loop2): Directory bread(block 132) failed [ 1342.925113] FAT-fs (loop2): Directory bread(block 133) failed 13:04:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000119, 0x0) 13:04:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1342.950412] FAT-fs (loop2): Directory bread(block 134) failed [ 1342.977153] FAT-fs (loop2): Directory bread(block 135) failed [ 1342.994253] FAT-fs (loop2): Directory bread(block 136) failed 13:04:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1343.024280] FAT-fs (loop2): Directory bread(block 137) failed 13:04:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000086, 0x0) 13:04:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000079, 0x0) 13:04:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1343.218976] attempt to access beyond end of device [ 1343.224159] loop2: rw=2049, want=310, limit=128 [ 1343.228889] buffer_io_error: 38 callbacks suppressed [ 1343.228903] Buffer I/O error on dev loop2, logical block 309, lost async page write 13:04:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000150, 0x0) 13:04:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000117, 0x0) [ 1343.315394] attempt to access beyond end of device [ 1343.320561] loop2: rw=2049, want=311, limit=128 [ 1343.325288] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1343.387655] attempt to access beyond end of device [ 1343.393109] loop2: rw=2049, want=312, limit=128 [ 1343.397843] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1343.425093] attempt to access beyond end of device [ 1343.430214] loop2: rw=2049, want=313, limit=128 [ 1343.434948] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1343.460887] attempt to access beyond end of device [ 1343.465919] loop2: rw=2049, want=326, limit=128 [ 1343.470656] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1343.493874] attempt to access beyond end of device [ 1343.498945] loop2: rw=2049, want=327, limit=128 [ 1343.503668] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1343.533811] attempt to access beyond end of device [ 1343.538864] loop2: rw=2049, want=328, limit=128 [ 1343.543600] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1343.591327] attempt to access beyond end of device [ 1343.591730] attempt to access beyond end of device [ 1343.596421] loop2: rw=2049, want=329, limit=128 [ 1343.596439] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1343.601386] loop2: rw=2049, want=2154, limit=128 [ 1343.670999] attempt to access beyond end of device [ 1343.676134] loop2: rw=2049, want=2153, limit=128 [ 1343.694227] attempt to access beyond end of device [ 1343.699257] loop2: rw=2049, want=2154, limit=128 13:04:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xa0000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007d, 0x0) 13:04:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b6, 0x0) 13:04:11 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x7, 0x2000000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:11 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x84) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x185) ioctl$TIOCSBRK(r1, 0x5427) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:04:11 executing program 0: r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x8000, 0x23) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000540)=""/221, &(0x7f0000000640)=0xdd) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 13:04:11 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xc604000000000000, 0xfffffffffffffffe}) 13:04:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c7, 0x0) 13:04:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000031, 0x0) [ 1343.919216] FAT-fs (loop2): Directory bread(block 128) failed [ 1343.929202] FAT-fs (loop2): Directory bread(block 129) failed 13:04:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1343.968361] FAT-fs (loop2): Directory bread(block 130) failed [ 1343.990012] FAT-fs (loop2): Directory bread(block 131) failed [ 1344.017254] FAT-fs (loop2): Directory bread(block 132) failed 13:04:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007c, 0x0) 13:04:11 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8000000000010) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x2, 0x1000, 0xfffffffffffff108, 0x9, 0x10001, 0x7}) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x3ff, 0x2, 0x1, 0x3ff, 0x800, 0x1a2}}, 0x8) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 13:04:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000039, 0x0) [ 1344.041284] FAT-fs (loop2): Directory bread(block 133) failed [ 1344.075153] FAT-fs (loop2): Directory bread(block 134) failed [ 1344.102162] FAT-fs (loop2): Directory bread(block 135) failed [ 1344.128949] FAT-fs (loop2): Directory bread(block 136) failed [ 1344.159244] FAT-fs (loop2): Directory bread(block 137) failed [ 1344.277910] attempt to access beyond end of device [ 1344.282958] loop2: rw=2049, want=310, limit=128 [ 1344.287658] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1344.325996] attempt to access beyond end of device [ 1344.331122] loop2: rw=2049, want=311, limit=128 [ 1344.335835] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1344.355118] attempt to access beyond end of device [ 1344.360195] loop2: rw=2049, want=312, limit=128 [ 1344.374754] attempt to access beyond end of device [ 1344.379861] loop2: rw=2049, want=313, limit=128 [ 1344.399835] attempt to access beyond end of device [ 1344.404903] loop2: rw=2049, want=326, limit=128 [ 1344.422936] attempt to access beyond end of device [ 1344.428049] loop2: rw=2049, want=327, limit=128 [ 1344.446142] attempt to access beyond end of device [ 1344.451210] loop2: rw=2049, want=328, limit=128 [ 1344.459104] attempt to access beyond end of device [ 1344.464129] loop2: rw=2049, want=329, limit=128 [ 1344.489480] attempt to access beyond end of device [ 1344.494528] loop2: rw=2049, want=2153, limit=128 13:04:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000012, 0x0) 13:04:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ad, 0x0) [ 1344.664763] FAT-fs (loop2): Directory bread(block 128) failed [ 1344.682126] FAT-fs (loop2): Directory bread(block 129) failed [ 1344.702536] FAT-fs (loop2): Directory bread(block 130) failed [ 1344.720665] FAT-fs (loop2): Directory bread(block 131) failed [ 1344.739110] FAT-fs (loop2): Directory bread(block 132) failed [ 1344.752050] FAT-fs (loop2): Directory bread(block 133) failed [ 1344.770601] FAT-fs (loop2): Directory bread(block 134) failed [ 1344.780123] FAT-fs (loop2): Directory bread(block 135) failed [ 1344.788586] FAT-fs (loop2): Directory bread(block 136) failed 13:04:12 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x109000, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x7ff) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40002017}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:04:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1344.812144] FAT-fs (loop2): Directory bread(block 137) failed [ 1344.913066] attempt to access beyond end of device [ 1344.918125] loop2: rw=2049, want=310, limit=128 [ 1344.925931] attempt to access beyond end of device [ 1344.930951] loop2: rw=2049, want=311, limit=128 [ 1344.936134] attempt to access beyond end of device [ 1344.941124] loop2: rw=2049, want=312, limit=128 [ 1344.946241] attempt to access beyond end of device [ 1344.951219] loop2: rw=2049, want=313, limit=128 [ 1344.956339] attempt to access beyond end of device [ 1344.961308] loop2: rw=2049, want=326, limit=128 [ 1344.966346] attempt to access beyond end of device [ 1344.971313] loop2: rw=2049, want=327, limit=128 [ 1344.976433] attempt to access beyond end of device [ 1344.981413] loop2: rw=2049, want=328, limit=128 [ 1344.986910] attempt to access beyond end of device [ 1344.991906] loop2: rw=2049, want=329, limit=128 [ 1345.008596] attempt to access beyond end of device 13:04:12 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x410000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000032, 0x0) 13:04:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000008c, 0x0) 13:04:12 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x63030000, 0xfffffffffffffffe}) 13:04:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000001780)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f0000001800)=""/48, 0x30}], 0x1, &(0x7f0000001880)=""/25, 0x19}}], 0x1, 0x0, &(0x7f0000001940)={0x0, 0x1c9c380}) geteuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001980)={{{@in=@multicast2=0xe0000002, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, {{@in=@loopback=0x7f000001}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0xe8) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2198"], 0x2) sendto$inet(r0, &(0x7f0000000040)='Y', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) getegid() setfsgid(0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[]}, 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xf4) close(r0) [ 1345.013651] loop2: rw=2049, want=2153, limit=128 [ 1345.053266] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1345.076946] attempt to access beyond end of device [ 1345.082050] loop2: rw=2049, want=2154, limit=128 13:04:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000003e, 0x0) 13:04:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000131, 0x0) [ 1345.102217] attempt to access beyond end of device [ 1345.107244] loop2: rw=2049, want=2154, limit=128 13:04:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x7400000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1345.249014] FAT-fs (loop2): Directory bread(block 128) failed [ 1345.265699] FAT-fs (loop2): Directory bread(block 129) failed [ 1345.278498] FAT-fs (loop2): Directory bread(block 130) failed [ 1345.291353] FAT-fs (loop2): Directory bread(block 131) failed 13:04:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1345.304145] FAT-fs (loop2): Directory bread(block 132) failed [ 1345.317943] FAT-fs (loop2): Directory bread(block 133) failed [ 1345.331865] FAT-fs (loop2): Directory bread(block 134) failed [ 1345.344653] FAT-fs (loop2): Directory bread(block 135) failed 13:04:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1345.360766] FAT-fs (loop2): Directory bread(block 136) failed [ 1345.388060] device lo entered promiscuous mode [ 1345.394821] FAT-fs (loop2): Directory bread(block 137) failed 13:04:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000041, 0x0) [ 1345.460090] device lo left promiscuous mode [ 1345.541242] attempt to access beyond end of device [ 1345.546531] loop2: rw=2049, want=310, limit=128 [ 1345.569884] attempt to access beyond end of device [ 1345.574958] loop2: rw=2049, want=311, limit=128 [ 1345.599091] attempt to access beyond end of device [ 1345.604178] loop2: rw=2049, want=312, limit=128 [ 1345.633809] device lo entered promiscuous mode [ 1345.638818] attempt to access beyond end of device [ 1345.643854] loop2: rw=2049, want=313, limit=128 [ 1345.707915] attempt to access beyond end of device [ 1345.713036] loop2: rw=2049, want=326, limit=128 [ 1345.717951] attempt to access beyond end of device [ 1345.722971] loop2: rw=2049, want=327, limit=128 [ 1345.739745] attempt to access beyond end of device [ 1345.744798] loop2: rw=2049, want=328, limit=128 [ 1345.752938] attempt to access beyond end of device [ 1345.757987] loop2: rw=2049, want=329, limit=128 [ 1345.768711] attempt to access beyond end of device [ 1345.773772] loop2: rw=2049, want=2153, limit=128 [ 1345.785552] attempt to access beyond end of device [ 1345.790617] loop2: rw=2049, want=2154, limit=128 13:04:13 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000240)={0x21, 0x3, 0x0, {0x1}}, 0x21) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)={0x40002017}) r5 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f00000001c0)={'vcan0\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) capget(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10001, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0xf8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:04:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1345.812520] attempt to access beyond end of device [ 1345.817564] loop2: rw=2049, want=2154, limit=128 13:04:13 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f0000000140), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x101000) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r4}) 13:04:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000002e, 0x0) 13:04:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000d40)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f00000006c0)=""/151, 0x97}, {&(0x7f0000000100)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/219, 0xdb}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000008c0)=""/12, 0xc}], 0x7, &(0x7f00000012c0)=""/41, 0x29}}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) 13:04:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000137, 0x0) 13:04:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xf4ffffff00000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:13 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xfd060000, 0xfffffffffffffffe}) 13:04:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000040)={"7369743000000000b5c7b9026c7fc5e5", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 13:04:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ac, 0x0) [ 1346.123581] FAT-fs (loop2): Directory bread(block 128) failed [ 1346.146841] FAT-fs (loop2): Directory bread(block 129) failed 13:04:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1346.175902] FAT-fs (loop2): Directory bread(block 130) failed [ 1346.202126] FAT-fs (loop2): Directory bread(block 131) failed 13:04:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000090, 0x0) 13:04:13 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000180), 0x80000002) [ 1346.227716] FAT-fs (loop2): Directory bread(block 132) failed [ 1346.243512] FAT-fs (loop2): Directory bread(block 133) failed 13:04:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000058, 0x0) [ 1346.271162] FAT-fs (loop2): Directory bread(block 134) failed [ 1346.292143] FAT-fs (loop2): Directory bread(block 135) failed [ 1346.302594] FAT-fs (loop2): Directory bread(block 136) failed [ 1346.327042] FAT-fs (loop2): Directory bread(block 137) failed [ 1346.438891] attempt to access beyond end of device [ 1346.443931] loop2: rw=2049, want=310, limit=128 [ 1346.457087] attempt to access beyond end of device [ 1346.462139] loop2: rw=2049, want=311, limit=128 [ 1346.475575] attempt to access beyond end of device [ 1346.480633] loop2: rw=2049, want=312, limit=128 [ 1346.485800] attempt to access beyond end of device [ 1346.490830] loop2: rw=2049, want=313, limit=128 [ 1346.495992] attempt to access beyond end of device [ 1346.501265] loop2: rw=2049, want=326, limit=128 [ 1346.506504] attempt to access beyond end of device [ 1346.511525] loop2: rw=2049, want=327, limit=128 [ 1346.516693] attempt to access beyond end of device [ 1346.521760] loop2: rw=2049, want=328, limit=128 [ 1346.527389] attempt to access beyond end of device [ 1346.532512] loop2: rw=2049, want=329, limit=128 [ 1346.539570] attempt to access beyond end of device [ 1346.544666] loop2: rw=2049, want=2153, limit=128 [ 1346.553985] attempt to access beyond end of device [ 1346.559042] loop2: rw=2049, want=2154, limit=128 [ 1346.580368] attempt to access beyond end of device [ 1346.585422] loop2: rw=2049, want=2154, limit=128 13:04:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ab, 0x0) 13:04:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:14 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) ioctl(r1, 0x2, &(0x7f0000000180)="ce5e79cc8d2894aeb8fa683fab3042edaec1ea3333a3664d5eed11193b7327f138eb043245605f6ced81a6ba93780b1ceda9753ae0af59b57beb22a0a6f32a53") socketpair(0x11, 0x8000f, 0x6, &(0x7f0000000100)={0xffffffffffffffff}) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x224, 0x8001, 0x3, 0x3, 0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x0) 13:04:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000001e, 0x0) 13:04:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x400000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:14 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1000, 0x80000) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r5 = msgget(0x1, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000580)={r6, 0x6}, &(0x7f00000005c0)=0x8) setsockopt$inet_int(r4, 0x0, 0x1f, &(0x7f0000000400)=0x2, 0x4) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000340)=""/122) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000440)={0x0, 0x8}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000004c0)={r7, 0x1f}, 0x8) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x7fff, 0x6, 0x4, 0x9, 0xc7e, 0xf80000, 0xe318, {0x0, @in6={{0xa, 0x4e21, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffeac9}}, 0x3ff, 0x1000, 0x2, 0x5, 0x6b11}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r9, 0x1000}, 0x8) 13:04:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:14 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xb603, 0xfffffffffffffffe}) 13:04:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000009a, 0x0) 13:04:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) 13:04:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000006e, 0x0) [ 1347.320986] FAT-fs (loop2): Directory bread(block 128) failed [ 1347.356940] FAT-fs (loop2): Directory bread(block 129) failed 13:04:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e2, 0x0) [ 1347.390079] FAT-fs (loop2): Directory bread(block 130) failed [ 1347.414080] FAT-fs (loop2): Directory bread(block 131) failed 13:04:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007fe, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmmsg(r0, &(0x7f0000006140)=[{{&(0x7f0000000200)=@rc={0x1f}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)='s', 0x1}], 0x1}}], 0x1, 0x1) [ 1347.436231] FAT-fs (loop2): Directory bread(block 132) failed [ 1347.454558] FAT-fs (loop2): Directory bread(block 133) failed [ 1347.469374] FAT-fs (loop2): Directory bread(block 134) failed 13:04:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a7, 0x0) [ 1347.492523] FAT-fs (loop2): Directory bread(block 135) failed [ 1347.520127] FAT-fs (loop2): Directory bread(block 136) failed [ 1347.536660] FAT-fs (loop2): Directory bread(block 137) failed [ 1347.666085] attempt to access beyond end of device [ 1347.671190] loop2: rw=2049, want=310, limit=128 [ 1347.685925] attempt to access beyond end of device [ 1347.691008] loop2: rw=2049, want=311, limit=128 [ 1347.705634] attempt to access beyond end of device [ 1347.710691] loop2: rw=2049, want=312, limit=128 [ 1347.725423] attempt to access beyond end of device [ 1347.730454] loop2: rw=2049, want=313, limit=128 [ 1347.735281] attempt to access beyond end of device [ 1347.740342] loop2: rw=2049, want=326, limit=128 [ 1347.745267] attempt to access beyond end of device [ 1347.750291] loop2: rw=2049, want=327, limit=128 [ 1347.755170] attempt to access beyond end of device [ 1347.760191] loop2: rw=2049, want=328, limit=128 [ 1347.765047] attempt to access beyond end of device [ 1347.770063] loop2: rw=2049, want=329, limit=128 [ 1347.776537] attempt to access beyond end of device [ 1347.781563] loop2: rw=2049, want=2153, limit=128 [ 1347.795344] attempt to access beyond end of device [ 1347.800393] loop2: rw=2049, want=2154, limit=128 [ 1347.817060] attempt to access beyond end of device [ 1347.822112] loop2: rw=2049, want=2154, limit=128 13:04:15 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000000}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x2000) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100)={0xff8000000000000}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000019c0)={0x0}) recvmmsg(r1, &(0x7f0000001940)=[{{&(0x7f0000000140)=@rc, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/63, 0x3f}}, {{&(0x7f00000004c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x80, &(0x7f00000018c0)}}], 0x2, 0x0, &(0x7f0000001a00)={r2}) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000250007031dfffd946fa2830020200a00090000000600000000ffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:04:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000051, 0x0) 13:04:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000042, 0x0) 13:04:15 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x34e, 0xfffffffffffffffe}) 13:04:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:15 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0xfffffffffffffffb, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000060, 0x0) 13:04:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000047, 0x0) [ 1348.496231] FAT-fs (loop2): Directory bread(block 128) failed [ 1348.514579] FAT-fs (loop2): Directory bread(block 129) failed 13:04:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1348.538999] FAT-fs (loop2): Directory bread(block 130) failed [ 1348.553250] FAT-fs (loop2): Directory bread(block 131) failed [ 1348.572152] FAT-fs (loop2): Directory bread(block 132) failed 13:04:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000fc, 0x0) 13:04:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1348.606205] FAT-fs (loop2): Directory bread(block 133) failed [ 1348.632924] FAT-fs (loop2): Directory bread(block 134) failed 13:04:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000102, 0x0) 13:04:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1348.667061] FAT-fs (loop2): Directory bread(block 135) failed [ 1348.679590] FAT-fs (loop2): Directory bread(block 136) failed [ 1348.693874] FAT-fs (loop2): Directory bread(block 137) failed [ 1348.820553] attempt to access beyond end of device [ 1348.825593] loop2: rw=2049, want=310, limit=128 [ 1348.830317] buffer_io_error: 38 callbacks suppressed [ 1348.830334] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1348.878091] attempt to access beyond end of device [ 1348.883163] loop2: rw=2049, want=311, limit=128 [ 1348.887855] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1348.909116] attempt to access beyond end of device [ 1348.914221] loop2: rw=2049, want=312, limit=128 [ 1348.918921] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1348.947460] attempt to access beyond end of device [ 1348.952510] loop2: rw=2049, want=313, limit=128 [ 1348.957204] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1348.984929] attempt to access beyond end of device [ 1348.989983] loop2: rw=2049, want=326, limit=128 [ 1348.994682] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1349.003119] attempt to access beyond end of device [ 1349.008144] loop2: rw=2049, want=327, limit=128 [ 1349.012854] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1349.021248] attempt to access beyond end of device [ 1349.026277] loop2: rw=2049, want=328, limit=128 [ 1349.030980] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1349.039326] attempt to access beyond end of device [ 1349.044365] loop2: rw=2049, want=329, limit=128 [ 1349.049073] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1349.059802] attempt to access beyond end of device [ 1349.064840] loop2: rw=2049, want=2153, limit=128 [ 1349.083148] attempt to access beyond end of device [ 1349.088228] loop2: rw=2049, want=2154, limit=128 [ 1349.104992] attempt to access beyond end of device [ 1349.110070] loop2: rw=2049, want=2154, limit=128 [ 1349.241475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 1349.288010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:04:16 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x80800) clock_gettime(0x0, &(0x7f00000063c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{&(0x7f0000000280)=@hci={0x0, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/136, 0x88}, {&(0x7f00000003c0)=""/115, 0x73}], 0x2, &(0x7f0000000480)=""/179, 0xb3}, 0x2000000}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000700)=""/108, 0x6c}, {&(0x7f0000000780)=""/157, 0x9d}], 0x4, &(0x7f0000000880)=""/194, 0xc2, 0xf2d}, 0x5}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000980)=""/180, 0xb4}, {&(0x7f0000000a40)=""/176, 0xb0}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}], 0x4, &(0x7f0000002b40)=""/145, 0x91, 0x7}, 0x5}, {{&(0x7f0000002c00)=@nfc, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002c80)=""/71, 0x47}, {&(0x7f0000002d00)=""/71, 0x47}, {&(0x7f0000002d80)=""/221, 0xdd}, {&(0x7f0000002e80)=""/217, 0xd9}], 0x4, 0x0, 0x0, 0x5}, 0x7}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002fc0)=""/149, 0x95}, {&(0x7f0000003080)=""/198, 0xc6}, {&(0x7f0000003180)=""/169, 0xa9}], 0x3, &(0x7f0000003280)=""/241, 0xf1}, 0x6}, {{&(0x7f0000003380)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f0000003400)=""/11, 0xb}, {&(0x7f0000003440)=""/39, 0x27}, {&(0x7f0000003480)=""/166, 0xa6}, {&(0x7f0000003540)=""/106, 0x6a}, {&(0x7f00000035c0)}, {&(0x7f0000003600)=""/241, 0xf1}], 0x6, &(0x7f0000003780)=""/4096, 0x1000, 0x1}}, {{&(0x7f0000004780)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/224, 0xe0}, {&(0x7f0000005900)=""/68, 0x44}, {&(0x7f0000005980)=""/113, 0x71}, {&(0x7f0000005a00)=""/185, 0xb9}, {&(0x7f0000005ac0)=""/242, 0xf2}, {&(0x7f0000005bc0)=""/16, 0x10}, {&(0x7f0000005c00)=""/2, 0x2}, {&(0x7f0000005c40)=""/178, 0xb2}], 0x9, 0x0, 0x0, 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000006080)=[{&(0x7f0000005dc0)=""/9, 0x9}, {&(0x7f0000005e00)=""/154, 0x9a}, {&(0x7f0000005ec0)=""/20, 0x14}, {&(0x7f0000005f00)=""/157, 0x9d}, {&(0x7f0000005fc0)=""/65, 0x41}, {&(0x7f0000006040)=""/4, 0x4}], 0x6, &(0x7f0000006100)=""/177, 0xb1, 0x4}, 0x4}], 0x8, 0x40000000, &(0x7f0000006400)={r4, r5+10000000}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000006440)={@remote={0xfe, 0x80, [], 0xbb}, 0x75, r6}) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) timerfd_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) timerfd_create(0x7, 0x80000) 13:04:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000121, 0x0) 13:04:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b4, 0x0) 13:04:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x5, 0x1000000200007d}) 13:04:16 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x6a05000000000000, 0xfffffffffffffffe}) 13:04:16 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x1) ioctl$sock_SIOCGIFCONF(r4, 0x8910, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'tunl0\x00', @ifru_map={0x401, 0xd4, 0x3813, 0x400, 0x0, 0x400}}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:16 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x8, 0xf, 0x0, 0x0, 0x0, 0x228, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 13:04:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1349.513835] FAT-fs (loop2): Directory bread(block 128) failed [ 1349.534327] FAT-fs (loop2): Directory bread(block 129) failed [ 1349.557383] FAT-fs (loop2): Directory bread(block 130) failed 13:04:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ec, 0x0) [ 1349.577693] FAT-fs (loop2): Directory bread(block 131) failed [ 1349.599812] FAT-fs (loop2): Directory bread(block 132) failed [ 1349.620842] FAT-fs (loop2): Directory bread(block 133) failed 13:04:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000003, 0x0) 13:04:16 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 1349.634474] FAT-fs (loop2): Directory bread(block 134) failed [ 1349.647048] FAT-fs (loop2): Directory bread(block 135) failed [ 1349.660687] FAT-fs (loop2): Directory bread(block 136) failed 13:04:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1349.682618] FAT-fs (loop2): Directory bread(block 137) failed 13:04:17 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0x44}}) 13:04:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1349.786570] attempt to access beyond end of device [ 1349.791615] loop2: rw=2049, want=310, limit=128 [ 1349.796346] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1349.825862] attempt to access beyond end of device [ 1349.830932] loop2: rw=2049, want=311, limit=128 [ 1349.835676] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1349.864086] attempt to access beyond end of device [ 1349.869128] loop2: rw=2049, want=312, limit=128 [ 1349.888535] attempt to access beyond end of device [ 1349.893591] loop2: rw=2049, want=313, limit=128 [ 1349.909164] attempt to access beyond end of device [ 1349.914212] loop2: rw=2049, want=326, limit=128 [ 1349.919033] attempt to access beyond end of device [ 1349.924035] loop2: rw=2049, want=327, limit=128 [ 1349.928836] attempt to access beyond end of device [ 1349.933834] loop2: rw=2049, want=328, limit=128 [ 1349.938648] attempt to access beyond end of device [ 1349.943653] loop2: rw=2049, want=329, limit=128 [ 1349.949901] attempt to access beyond end of device [ 1349.954898] loop2: rw=2049, want=2153, limit=128 [ 1349.966152] attempt to access beyond end of device [ 1349.971172] loop2: rw=2049, want=2154, limit=128 [ 1349.991701] attempt to access beyond end of device [ 1349.996767] loop2: rw=2049, want=2154, limit=128 13:04:17 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000123, 0x0) 13:04:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000f1, 0x0) 13:04:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007fe, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 13:04:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x6800000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:17 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xdc03000000000000, 0xfffffffffffffffe}) 13:04:17 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) r4 = memfd_create(&(0x7f0000000100)='\x00', 0x1) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000140)={0x3, 0x401}) 13:04:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1350.704363] FAT-fs (loop2): Directory bread(block 128) failed 13:04:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000002900)=[{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001600), 0x0, &(0x7f0000001640)=[@rights={0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}], 0x14}], 0x1, 0x0) [ 1350.746206] FAT-fs (loop2): Directory bread(block 129) failed [ 1350.776379] FAT-fs (loop2): Directory bread(block 130) failed 13:04:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c8, 0x0) 13:04:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000010e, 0x0) [ 1350.803090] FAT-fs (loop2): Directory bread(block 131) failed [ 1350.829127] FAT-fs (loop2): Directory bread(block 132) failed [ 1350.843917] FAT-fs (loop2): Directory bread(block 133) failed [ 1350.850611] FAT-fs (loop2): Directory bread(block 134) failed 13:04:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:18 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)) [ 1350.876141] FAT-fs (loop2): Directory bread(block 135) failed [ 1350.903537] FAT-fs (loop2): Directory bread(block 136) failed [ 1350.925093] FAT-fs (loop2): Directory bread(block 137) failed 13:04:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1351.076946] attempt to access beyond end of device [ 1351.082127] loop2: rw=2049, want=310, limit=128 [ 1351.091096] attempt to access beyond end of device [ 1351.096201] loop2: rw=2049, want=311, limit=128 [ 1351.117355] attempt to access beyond end of device [ 1351.122384] loop2: rw=2049, want=312, limit=128 [ 1351.147907] attempt to access beyond end of device [ 1351.153013] loop2: rw=2049, want=313, limit=128 [ 1351.170799] attempt to access beyond end of device [ 1351.175874] loop2: rw=2049, want=326, limit=128 [ 1351.185104] attempt to access beyond end of device [ 1351.190134] loop2: rw=2049, want=327, limit=128 [ 1351.205799] attempt to access beyond end of device [ 1351.210897] loop2: rw=2049, want=328, limit=128 [ 1351.223116] attempt to access beyond end of device [ 1351.228178] loop2: rw=2049, want=329, limit=128 [ 1351.239235] attempt to access beyond end of device [ 1351.244299] loop2: rw=2049, want=2153, limit=128 [ 1351.259125] attempt to access beyond end of device [ 1351.264189] loop2: rw=2049, want=2154, limit=128 [ 1351.279850] attempt to access beyond end of device [ 1351.284912] loop2: rw=2049, want=2154, limit=128 13:04:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x80}, 0x1}, 0x0) 13:04:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000e3, 0x0) 13:04:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000009e, 0x0) 13:04:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xfbffffff, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:19 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) write$FUSE_OPEN(r0, &(0x7f0000000180)={0x20, 0x0, 0x1, {0x0, 0x6}}, 0x20) accept4$inet(r0, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f00000001c0)=0xffffff59, 0x80000) r1 = epoll_create1(0x0) r2 = epoll_create1(0x7fffc) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4}) timerfd_settime(r0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, &(0x7f0000000280)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) write$binfmt_aout(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x590) request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='security$\x00', 0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_create(0xfffffffffffffffa) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:19 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xcd03000000000000, 0xfffffffffffffffe}) 13:04:19 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) fcntl$dupfd(r1, 0x406, r1) r3 = timerfd_create(0x0, 0x8000000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 13:04:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 1351.832887] FAT-fs (loop2): Directory bread(block 128) failed [ 1351.859558] FAT-fs (loop2): Directory bread(block 129) failed [ 1351.878458] FAT-fs (loop2): Directory bread(block 130) failed 13:04:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000088, 0x0) 13:04:19 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x3, 0x8}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1351.908090] FAT-fs (loop2): Directory bread(block 131) failed [ 1351.919405] FAT-fs (loop2): Directory bread(block 132) failed 13:04:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000012c, 0x0) 13:04:19 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') [ 1351.953788] FAT-fs (loop2): Directory bread(block 133) failed [ 1351.982589] FAT-fs (loop2): Directory bread(block 134) failed 13:04:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1351.999827] FAT-fs (loop2): Directory bread(block 135) failed [ 1352.018665] FAT-fs (loop2): Directory bread(block 136) failed 13:04:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a4, 0x0) 13:04:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="78733976000898fcffff6054be13cfe62785ce10", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x1b6) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/223, 0xdf}}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/161, 0xa1}], 0x1}}], 0x2, 0x0, &(0x7f0000001400)={0x0, 0x1c9c380}) [ 1352.044939] FAT-fs (loop2): Directory bread(block 137) failed 13:04:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1352.200209] attempt to access beyond end of device [ 1352.205288] loop2: rw=2049, want=310, limit=128 [ 1352.223405] attempt to access beyond end of device [ 1352.228508] loop2: rw=2049, want=311, limit=128 [ 1352.244223] attempt to access beyond end of device [ 1352.249346] loop2: rw=2049, want=312, limit=128 [ 1352.264045] attempt to access beyond end of device [ 1352.269098] loop2: rw=2049, want=313, limit=128 [ 1352.274395] attempt to access beyond end of device [ 1352.279464] loop2: rw=2049, want=326, limit=128 [ 1352.284643] attempt to access beyond end of device [ 1352.289690] loop2: rw=2049, want=327, limit=128 [ 1352.294866] attempt to access beyond end of device 13:04:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a5, 0x0) 13:04:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000e00)=[@text64={0x40, &(0x7f0000000e80)="66b88c008ec8430f01d10f20a03e66d17293c4e1fc117bd2660fe590387e000066baf80cb8e42ede86ef66bafc0cb806e60000efc4c20bf7b7004800000f00180f20d835200000000f22d8", 0x4b}], 0x1, 0x0, &(0x7f0000000200), 0x0) [ 1352.299895] loop2: rw=2049, want=328, limit=128 [ 1352.305095] attempt to access beyond end of device [ 1352.310116] loop2: rw=2049, want=329, limit=128 [ 1352.316963] attempt to access beyond end of device [ 1352.322014] loop2: rw=2049, want=2153, limit=128 [ 1352.425180] FAT-fs (loop2): Directory bread(block 128) failed [ 1352.438130] FAT-fs (loop2): Directory bread(block 129) failed [ 1352.448930] FAT-fs (loop2): Directory bread(block 130) failed [ 1352.455589] FAT-fs (loop2): Directory bread(block 131) failed [ 1352.462366] FAT-fs (loop2): Directory bread(block 132) failed [ 1352.468532] FAT-fs (loop2): Directory bread(block 133) failed [ 1352.474950] FAT-fs (loop2): Directory bread(block 134) failed [ 1352.481413] FAT-fs (loop2): Directory bread(block 135) failed [ 1352.487811] FAT-fs (loop2): Directory bread(block 136) failed [ 1352.494295] FAT-fs (loop2): Directory bread(block 137) failed 13:04:19 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xe006000000000000, 0xfffffffffffffffe}) [ 1352.582224] attempt to access beyond end of device [ 1352.587298] loop2: rw=2049, want=310, limit=128 [ 1352.594096] attempt to access beyond end of device [ 1352.599158] loop2: rw=2049, want=311, limit=128 [ 1352.617908] attempt to access beyond end of device [ 1352.622957] loop2: rw=2049, want=312, limit=128 [ 1352.646160] attempt to access beyond end of device [ 1352.651219] loop2: rw=2049, want=313, limit=128 [ 1352.657092] attempt to access beyond end of device [ 1352.662110] loop2: rw=2049, want=326, limit=128 [ 1352.671321] attempt to access beyond end of device [ 1352.676672] loop2: rw=2049, want=327, limit=128 [ 1352.690226] attempt to access beyond end of device [ 1352.695261] loop2: rw=2049, want=328, limit=128 [ 1352.709857] attempt to access beyond end of device [ 1352.714890] loop2: rw=2049, want=329, limit=128 [ 1352.723569] attempt to access beyond end of device [ 1352.728592] loop2: rw=2049, want=2153, limit=128 13:04:20 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'bond_slave_1\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000200)=""/69) 13:04:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000120, 0x0) 13:04:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000073, 0x0) 13:04:20 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r3 = dup(r2) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000080)={0xffff, 0x6}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 13:04:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x209, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x30, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000040)) 13:04:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x8000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000114, 0x0) [ 1353.002088] dccp_v4_rcv: dropped packet with invalid checksum [ 1353.015165] FAT-fs (loop2): Directory bread(block 128) failed [ 1353.027060] FAT-fs (loop2): Directory bread(block 129) failed [ 1353.044173] dccp_v4_rcv: dropped packet with invalid checksum 13:04:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000154, 0x0) 13:04:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:20 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x3107, 0xfffffffffffffffe}) [ 1353.052563] FAT-fs (loop2): Directory bread(block 130) failed [ 1353.072558] FAT-fs (loop2): Directory bread(block 131) failed [ 1353.092549] FAT-fs (loop2): Directory bread(block 132) failed 13:04:20 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0x24}}) 13:04:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000000d, 0x0) 13:04:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1353.114529] FAT-fs (loop2): Directory bread(block 133) failed [ 1353.133149] FAT-fs (loop2): Directory bread(block 134) failed [ 1353.141344] FAT-fs (loop2): Directory bread(block 135) failed [ 1353.147948] FAT-fs (loop2): Directory bread(block 136) failed [ 1353.154622] FAT-fs (loop2): Directory bread(block 137) failed 13:04:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000ae, 0x0) [ 1353.258618] attempt to access beyond end of device [ 1353.263673] loop2: rw=2049, want=310, limit=128 [ 1353.269298] attempt to access beyond end of device [ 1353.274337] loop2: rw=2049, want=311, limit=128 [ 1353.291474] attempt to access beyond end of device [ 1353.296526] loop2: rw=2049, want=312, limit=128 [ 1353.302882] attempt to access beyond end of device [ 1353.307929] loop2: rw=2049, want=313, limit=128 [ 1353.313421] attempt to access beyond end of device [ 1353.318450] loop2: rw=2049, want=326, limit=128 [ 1353.323779] attempt to access beyond end of device [ 1353.328838] loop2: rw=2049, want=327, limit=128 [ 1353.341955] attempt to access beyond end of device [ 1353.347038] loop2: rw=2049, want=328, limit=128 [ 1353.362088] attempt to access beyond end of device [ 1353.367166] loop2: rw=2049, want=329, limit=128 [ 1353.398865] attempt to access beyond end of device [ 1353.403887] loop2: rw=2049, want=2153, limit=128 [ 1353.432176] attempt to access beyond end of device [ 1353.437212] loop2: rw=2049, want=2154, limit=128 [ 1353.459749] attempt to access beyond end of device [ 1353.464802] loop2: rw=2049, want=2154, limit=128 13:04:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 13:04:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d0, 0x0) 13:04:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000002, 0x0) 13:04:21 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x4000201b}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) prctl$setmm(0x23, 0x1, &(0x7f0000ffd000/0x3000)=nil) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x400) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000100)={0x2, 0x6, 0xffffffff, 0x719, 0x80, 0x3, 0x2}, 0xc) 13:04:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:21 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000200)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x210080, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x1ff, {{0xa, 0x4e20, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x3ff}}}, 0x88) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0)={0xa2}, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x400, 0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000240)={0x20008}) 13:04:21 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x85030000, 0xfffffffffffffffe}) 13:04:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a6, 0x0) 13:04:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x90, &(0x7f000002f000)) 13:04:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000011c, 0x0) 13:04:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1354.184921] FAT-fs (loop2): Directory bread(block 128) failed [ 1354.200383] FAT-fs (loop2): Directory bread(block 129) failed [ 1354.218861] FAT-fs (loop2): Directory bread(block 130) failed 13:04:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c3, 0x0) [ 1354.243110] FAT-fs (loop2): Directory bread(block 131) failed [ 1354.261932] FAT-fs (loop2): Directory bread(block 132) failed 13:04:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000eb, 0x0) [ 1354.284115] FAT-fs (loop2): Directory bread(block 133) failed [ 1354.311097] FAT-fs (loop2): Directory bread(block 134) failed [ 1354.328181] FAT-fs (loop2): Directory bread(block 135) failed 13:04:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1354.345352] FAT-fs (loop2): Directory bread(block 136) failed [ 1354.373481] FAT-fs (loop2): Directory bread(block 137) failed 13:04:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000013a, 0x0) 13:04:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000112, 0x0) [ 1354.525125] attempt to access beyond end of device [ 1354.530205] loop2: rw=2049, want=310, limit=128 [ 1354.534911] buffer_io_error: 38 callbacks suppressed [ 1354.534920] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1354.579079] attempt to access beyond end of device [ 1354.584128] loop2: rw=2049, want=311, limit=128 [ 1354.588853] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1354.606837] attempt to access beyond end of device [ 1354.611922] loop2: rw=2049, want=312, limit=128 [ 1354.616658] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 1354.629854] attempt to access beyond end of device [ 1354.634959] loop2: rw=2049, want=313, limit=128 [ 1354.639825] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 1354.684565] attempt to access beyond end of device [ 1354.689657] loop2: rw=2049, want=326, limit=128 [ 1354.694391] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 1354.704865] attempt to access beyond end of device [ 1354.709920] loop2: rw=2049, want=327, limit=128 [ 1354.714698] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 1354.723159] attempt to access beyond end of device [ 1354.728202] loop2: rw=2049, want=328, limit=128 [ 1354.732917] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 1354.741280] attempt to access beyond end of device [ 1354.746293] loop2: rw=2049, want=329, limit=128 [ 1354.751034] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 1354.761631] attempt to access beyond end of device [ 1354.766724] loop2: rw=2049, want=2153, limit=128 [ 1354.779269] attempt to access beyond end of device [ 1354.784310] loop2: rw=2049, want=2154, limit=128 [ 1354.799617] attempt to access beyond end of device [ 1354.804654] loop2: rw=2049, want=2154, limit=128 13:04:22 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1000, 0x8201) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000100)=0x3, 0x4) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:22 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f000020", @ANYRES16=r2, @ANYBLOB="00062dbd7000fcdbdf25100000002c000300080005007f0000010800030000000000080004000300000008000500e00000020800080009000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) ptrace(0x10, r0) r5 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x40002017}) timerfd_settime(r5, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x155555555555562d, 0xbd09, &(0x7f0000000280), 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000021ff4)={0x2001}) 13:04:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000c8, 0x0) 13:04:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000014b, 0x0) 13:04:22 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xd109, 0xfffffffffffffffe}) 13:04:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x100000000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r1, 0x1) 13:04:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1355.298229] FAT-fs (loop2): Directory bread(block 128) failed [ 1355.314736] FAT-fs (loop2): Directory bread(block 129) failed 13:04:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000091, 0x0) 13:04:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1355.343091] FAT-fs (loop2): Directory bread(block 130) failed [ 1355.363989] FAT-fs (loop2): Directory bread(block 131) failed [ 1355.383740] FAT-fs (loop2): Directory bread(block 132) failed 13:04:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000022, 0x0) [ 1355.398782] FAT-fs (loop2): Directory bread(block 133) failed [ 1355.423681] FAT-fs (loop2): Directory bread(block 134) failed 13:04:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1355.444548] FAT-fs (loop2): Directory bread(block 135) failed [ 1355.450791] FAT-fs (loop2): Directory bread(block 136) failed [ 1355.458408] FAT-fs (loop2): Directory bread(block 137) failed 13:04:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000d8, 0x0) 13:04:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000a5, 0x0) 13:04:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1355.584758] attempt to access beyond end of device [ 1355.589873] loop2: rw=2049, want=310, limit=128 [ 1355.594585] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 1355.605143] attempt to access beyond end of device [ 1355.610210] loop2: rw=2049, want=311, limit=128 [ 1355.614925] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 1355.623478] attempt to access beyond end of device [ 1355.628530] loop2: rw=2049, want=312, limit=128 [ 1355.639445] attempt to access beyond end of device [ 1355.644518] loop2: rw=2049, want=313, limit=128 [ 1355.672154] attempt to access beyond end of device [ 1355.677310] loop2: rw=2049, want=326, limit=128 [ 1355.688361] attempt to access beyond end of device [ 1355.693430] loop2: rw=2049, want=327, limit=128 [ 1355.698677] attempt to access beyond end of device [ 1355.703763] loop2: rw=2049, want=328, limit=128 [ 1355.709107] attempt to access beyond end of device [ 1355.714164] loop2: rw=2049, want=329, limit=128 [ 1355.721326] attempt to access beyond end of device [ 1355.726359] loop2: rw=2049, want=2153, limit=128 13:04:23 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 13:04:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000071, 0x0) 13:04:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000084, 0x0) 13:04:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x74, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:23 executing program 4: 13:04:23 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x10001, 0xa186, 0x3, 0x9d, r0}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40002017}) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 13:04:23 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0xf407, 0xfffffffffffffffe}) 13:04:23 executing program 4: 13:04:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 1356.313245] FAT-fs (loop2): Directory bread(block 128) failed [ 1356.340747] FAT-fs (loop2): Directory bread(block 129) failed [ 1356.356365] FAT-fs (loop2): Directory bread(block 130) failed 13:04:23 executing program 4: [ 1356.381323] FAT-fs (loop2): Directory bread(block 131) failed [ 1356.400508] FAT-fs (loop2): Directory bread(block 132) failed 13:04:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000065, 0x0) 13:04:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000000b2, 0x0) [ 1356.423373] FAT-fs (loop2): Directory bread(block 133) failed [ 1356.442600] FAT-fs (loop2): Directory bread(block 134) failed [ 1356.460988] FAT-fs (loop2): Directory bread(block 135) failed 13:04:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:23 executing program 4: [ 1356.481934] FAT-fs (loop2): Directory bread(block 136) failed [ 1356.514130] FAT-fs (loop2): Directory bread(block 137) failed [ 1356.674715] attempt to access beyond end of device [ 1356.679754] loop2: rw=2049, want=310, limit=128 [ 1356.698546] attempt to access beyond end of device [ 1356.703586] loop2: rw=2049, want=311, limit=128 [ 1356.720240] attempt to access beyond end of device [ 1356.725272] loop2: rw=2049, want=312, limit=128 [ 1356.740828] attempt to access beyond end of device [ 1356.745861] loop2: rw=2049, want=313, limit=128 [ 1356.764672] attempt to access beyond end of device [ 1356.770457] loop2: rw=2049, want=326, limit=128 [ 1356.793687] attempt to access beyond end of device [ 1356.798756] loop2: rw=2049, want=327, limit=128 [ 1356.803936] attempt to access beyond end of device [ 1356.808934] loop2: rw=2049, want=328, limit=128 [ 1356.813973] attempt to access beyond end of device [ 1356.818965] loop2: rw=2049, want=329, limit=128 [ 1356.825447] attempt to access beyond end of device [ 1356.830446] loop2: rw=2049, want=2153, limit=128 13:04:24 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x400) r2 = timerfd_create(0x0, 0x0) r3 = geteuid() epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000200)={0x10000000}) write$binfmt_elf32(r2, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x0, 0x80000000, 0x1, 0x5, 0x3, 0x3e, 0xff, 0x280, 0x38, 0x3e0, 0x1b, 0x9, 0x20, 0x2, 0x7, 0x2, 0xffffffffffffff55}, [{0x6474e555, 0x5, 0x3f, 0x40, 0xfffffffffffffffc, 0xba, 0xe1, 0x7}], "d2eacf3f0dfc2a67600f33f1b311ec5bd0bce96f853c9ad7b5ba10bea76566da1d1b40d75f6090ab72fadccd50a9d450991f8a7a99bb9b75575ccf81a9c40e843f881462d31a5edc04a518673b3d0c9cf154d16d86a2518f80d8d9e3754783c4c6115dcbd5f4", [[], [], [], []]}, 0x4be) ioprio_get$uid(0x3, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002017}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x4000, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000100)=""/249) timerfd_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xbd09, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) r5 = dup(r2) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x3, 0x4) 13:04:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x40000000000007c, 0x0) 13:04:24 executing program 4: 13:04:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 13:04:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x2600000000000000, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 13:04:24 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x8e02, 0xfffffffffffffffe}) 13:04:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0xfc, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x400000000000045, 0x0) [ 1357.431242] FAT-fs (loop2): Directory bread(block 128) failed [ 1357.449868] FAT-fs (loop2): Directory bread(block 129) failed [ 1357.474102] FAT-fs (loop2): Directory bread(block 130) failed [ 1357.502114] FAT-fs (loop2): Directory bread(block 131) failed [ 1357.512597] FAT-fs (loop2): Directory bread(block 132) failed [ 1357.528596] FAT-fs (loop2): Directory bread(block 133) failed [ 1357.543328] FAT-fs (loop2): Directory bread(block 134) failed [ 1357.557986] FAT-fs (loop2): Directory bread(block 135) failed [ 1357.570662] FAT-fs (loop2): Directory bread(block 136) failed [ 1357.584315] FAT-fs (loop2): Directory bread(block 137) failed [ 1357.675746] attempt to access beyond end of device [ 1357.680787] loop2: rw=2049, want=310, limit=128 [ 1357.696638] attempt to access beyond end of device [ 1357.701672] loop2: rw=2049, want=311, limit=128 [ 1357.716248] attempt to access beyond end of device [ 1357.721291] loop2: rw=2049, want=312, limit=128 [ 1357.737559] attempt to access beyond end of device [ 1357.742634] loop2: rw=2049, want=313, limit=128 [ 1357.757256] attempt to access beyond end of device [ 1357.762304] loop2: rw=2049, want=326, limit=128 [ 1357.778044] attempt to access beyond end of device [ 1357.783087] loop2: rw=2049, want=327, limit=128 [ 1357.797093] attempt to access beyond end of device [ 1357.802121] loop2: rw=2049, want=328, limit=128 [ 1357.822112] attempt to access beyond end of device [ 1357.827151] loop2: rw=2049, want=329, limit=128 [ 1357.841041] attempt to access beyond end of device [ 1357.846099] loop2: rw=2049, want=2153, limit=128 [ 1357.871965] attempt to access beyond end of device [ 1357.877015] loop2: rw=2049, want=2154, limit=128 [ 1357.903147] attempt to access beyond end of device [ 1357.908181] loop2: rw=2049, want=2154, limit=128 [ 1360.543796] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 1360.551838] PGD 1d712d067 P4D 1d712d067 PUD 1b2a1e067 PMD 0 [ 1360.557655] Oops: 0010 [#1] SMP KASAN [ 1360.561457] CPU: 1 PID: 1534 Comm: kswapd0 Not tainted 4.18.0-rc4-next-20180713+ #7 [ 1360.569246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.578610] RIP: 0010: (null) [ 1360.582485] Code: Bad RIP value. [ 1360.585859] RSP: 0018:ffff8801d3edf310 EFLAGS: 00010246 [ 1360.591222] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81a1ba2d [ 1360.598491] RDX: 1ffff10032ea5d96 RSI: ffff8801d3edf590 RDI: ffff88019752ecb0 [ 1360.605761] RBP: ffff8801d3edf500 R08: ffff8801d3eb0140 R09: ffffed003ae02890 [ 1360.613032] R10: ffffed003ae02890 R11: ffff8801d7014487 R12: ffff8801d3edf590 [ 1360.620303] R13: ffff88019752ecb0 R14: ffff88019752ecd8 R15: 0000000000000080 [ 1360.627575] FS: 0000000000000000(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 1360.635800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1360.641679] CR2: ffffffffffffffd6 CR3: 00000001b2786000 CR4: 00000000001406e0 [ 1360.648969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1360.656236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1360.663498] Call Trace: [ 1360.666089] ? do_shrink_slab+0x148/0xc50 [ 1360.670242] ? node_tag_get.constprop.17+0xa0/0xa0 [ 1360.675176] ? snapshot_refaults+0x290/0x290 [ 1360.679601] ? kasan_check_read+0x11/0x20 [ 1360.683753] ? shrink_slab+0x1f3/0xa60 [ 1360.687644] ? downgrade_write+0x2b0/0x2b0 [ 1360.691881] ? throttle_direct_reclaim+0x9f0/0x9f0 [ 1360.696821] ? radix_tree_lookup+0x21/0x30 [ 1360.701058] shrink_slab+0x861/0xa60 [ 1360.704784] ? unregister_memcg_shrinker.isra.39+0x50/0x50 [ 1360.710423] ? lock_downgrade+0x8f0/0x8f0 [ 1360.714587] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1360.720126] shrink_node+0x429/0x16a0 [ 1360.724166] ? shrink_node_memcg+0x18f0/0x18f0 [ 1360.728754] ? zone_watermark_ok_safe+0x14b/0x3d0 [ 1360.733600] ? lock_acquire+0x1e4/0x540 [ 1360.737582] ? __alloc_pages_direct_compact+0x340/0x340 [ 1360.742953] ? lock_release+0xa30/0xa30 [ 1360.746932] ? __sched_text_start+0x8/0x8 [ 1360.751109] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1360.756666] ? pgdat_balanced+0x118/0x150 [ 1360.760817] balance_pgdat+0x7ca/0x1010 [ 1360.764812] ? mem_cgroup_shrink_node+0xb20/0xb20 [ 1360.769674] ? check_same_owner+0x340/0x340 [ 1360.773999] ? rcu_note_context_switch+0x730/0x730 [ 1360.778933] kswapd+0x82e/0x12f0 [ 1360.782307] ? balance_pgdat+0x1010/0x1010 [ 1360.786549] ? finish_wait+0x430/0x430 [ 1360.790455] ? kasan_check_read+0x11/0x20 [ 1360.794609] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1360.799026] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1360.804135] ? __kthread_parkme+0x58/0x1b0 [ 1360.808376] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1360.813406] ? trace_hardirqs_on+0xd/0x10 [ 1360.817555] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1360.823109] ? __kthread_parkme+0x106/0x1b0 [ 1360.827443] kthread+0x345/0x410 [ 1360.830819] ? balance_pgdat+0x1010/0x1010 [ 1360.835057] ? kthread_bind+0x40/0x40 [ 1360.838867] ret_from_fork+0x3a/0x50 [ 1360.842587] Modules linked in: [ 1360.845785] Dumping ftrace buffer: [ 1360.849320] (ftrace buffer empty) [ 1360.853051] CR2: 0000000000000000 [ 1360.856508] ---[ end trace 38b5a67e8bf844fa ]--- [ 1360.861262] RIP: 0010: (null) [ 1360.865154] Code: Bad RIP value. [ 1360.868531] RSP: 0018:ffff8801d3edf310 EFLAGS: 00010246 [ 1360.873911] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81a1ba2d [ 1360.881179] RDX: 1ffff10032ea5d96 RSI: ffff8801d3edf590 RDI: ffff88019752ecb0 [ 1360.888449] RBP: ffff8801d3edf500 R08: ffff8801d3eb0140 R09: ffffed003ae02890 [ 1360.895719] R10: ffffed003ae02890 R11: ffff8801d7014487 R12: ffff8801d3edf590 [ 1360.902991] R13: ffff88019752ecb0 R14: ffff88019752ecd8 R15: 0000000000000080 [ 1360.910266] FS: 0000000000000000(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 1360.918496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1360.924374] CR2: ffffffffffffffd6 CR3: 00000001b2786000 CR4: 00000000001406e0 [ 1360.931642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1360.938911] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1360.946179] Kernel panic - not syncing: Fatal exception [ 1360.952150] Dumping ftrace buffer: [ 1360.955681] (ftrace buffer empty) [ 1360.959370] Kernel Offset: disabled [ 1360.962999] Rebooting in 86400 seconds..