0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}) r1 = semget(0x2, 0x2, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x8000, 0x8, 0x7fffffff, 0x2]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f00000001c0)={0x400200005, 0x40000000009, 0x3}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0x100, 0x1000, 0x401]) [ 440.970765] FAT-fs (loop2): Directory bread(block 132) failed [ 441.001906] FAT-fs (loop2): Directory bread(block 133) failed [ 441.057288] FAT-fs (loop2): Directory bread(block 134) failed [ 441.094834] FAT-fs (loop0): Directory bread(block 2563) failed 19:07:11 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x58000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 441.102868] FAT-fs (loop2): Directory bread(block 135) failed [ 441.141795] FAT-fs (loop2): Directory bread(block 136) failed [ 441.144302] FAT-fs (loop0): Directory bread(block 2564) failed 19:07:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa) [ 441.193168] FAT-fs (loop2): Directory bread(block 137) failed [ 441.195744] FAT-fs (loop0): Directory bread(block 2565) failed [ 441.237789] FAT-fs (loop0): Directory bread(block 2566) failed [ 441.266429] FAT-fs (loop0): Directory bread(block 2567) failed [ 441.266495] attempt to access beyond end of device [ 441.277491] loop2: rw=2049, want=311, limit=128 [ 441.286936] FAT-fs (loop0): Directory bread(block 2568) failed [ 441.301307] FAT-fs (loop0): Directory bread(block 2569) failed [ 441.308168] FAT-fs (loop0): Directory bread(block 2570) failed [ 441.332818] FAT-fs (loop0): Directory bread(block 2571) failed 19:07:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffb, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x20f, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4003, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x141800, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendto$inet6(r0, &(0x7f0000000140)="0401000000c0031102000002000200001104", 0x12, 0x0, &(0x7f00000000c0)={0xa, 0x200010000010894f, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 19:07:11 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 441.360711] FAT-fs (loop0): Directory bread(block 2572) failed [ 441.489400] FAT-fs (loop2): Directory bread(block 128) failed [ 441.524906] FAT-fs (loop2): Directory bread(block 129) failed 19:07:11 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0xffffff80}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:11 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x543], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/hci\x00') setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)="1c9652d0918baa685c845dbe19a611c1983d0a8a05f08fa7955b7c485cf2fdadb6041e13b29a0a7facefa4c5b0635ddca1948d61044e01f64eecbf206bdb319aee70086ac98b4a912411ecfb83fea6da8392736acc107e13db9103c20588cd8b1307e1745a31ecc42333bbfa5e79c5c4f7423bf411aa6bfb88e1aa7f011254f6cedd023c1380e176fdcabbc960f951c0b9b810211f0f5f844f3138f53bad4f83ac886df4cc", 0xa5, 0xfffffffffffffffb) keyctl$describe(0x6, r2, &(0x7f0000002400)=""/4096, 0x1000) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 19:07:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x1000000000000150, [{}, {}]}, 0x48) ioctl(r0, 0x100000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x6, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x2, 0x100) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x200000) sendto$unix(r3, &(0x7f0000000240)="4998dbfd79703ffbbe01037ee09c0e02514228f62405bb191e7204c5983083d7355b9944c5ee5774e2624772b9e24bf4f1df249fc218dd76a06df258066f6e2c4bf591a3be43410072e9f5571143b10ab2b767cf03b0f3b8a657369a3ea223abe998a5ac446a5b08f84dc9c82ff8df279838df804b7e9cd182557a522b96d79c37b43dbc0829c73e328898516fcf1448ea97623b74f51742d3ba48fbdb10b147732e85caacdac0fa0d0162ecfed47f4aa10775b5b358f2449d8ab7faaa32a24442cab991aed90fc186622a1e9dd56ab5eae589357d793c6721719e17cb2b5c6055e5240a28b32815e29ee381bd35030fe933d72f", 0xf4, 0x84, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x80000001, 0x1, 0x0, [{0xfffffffffffffffd, 0xffffffffe33b2bd4, 0x9, 0x0, 0x2, 0x4, 0x5}]}) getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:07:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x14d, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 441.549163] FAT-fs (loop2): Directory bread(block 130) failed [ 441.562175] FAT-fs (loop2): Directory bread(block 131) failed [ 441.576191] FAT-fs (loop2): Directory bread(block 132) failed 19:07:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x9801000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 441.620098] FAT-fs (loop2): Directory bread(block 133) failed [ 441.634849] FAT-fs (loop0): Directory bread(block 2563) failed [ 441.655209] FAT-fs (loop2): Directory bread(block 134) failed 19:07:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xf0, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:11 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x82ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc0, @time={0x0, 0x1c9c380}, 0x0, {0xffff, 0x3}, 0x100, 0x1, 0x80}) [ 441.684776] FAT-fs (loop2): Directory bread(block 135) failed [ 441.694118] FAT-fs (loop0): Directory bread(block 2564) failed [ 441.708168] FAT-fs (loop2): Directory bread(block 136) failed 19:07:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x40030000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 441.732171] FAT-fs (loop0): Directory bread(block 2565) failed [ 441.752300] FAT-fs (loop2): Directory bread(block 137) failed [ 441.773321] FAT-fs (loop0): Directory bread(block 2566) failed [ 441.805718] FAT-fs (loop0): Directory bread(block 2567) failed [ 441.820552] attempt to access beyond end of device [ 441.825617] loop2: rw=2049, want=311, limit=128 [ 441.838759] FAT-fs (loop0): Directory bread(block 2568) failed 19:07:11 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x88470000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 441.859882] FAT-fs (loop0): Directory bread(block 2569) failed [ 441.892169] FAT-fs (loop0): Directory bread(block 2570) failed 19:07:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1d00000000000000) 19:07:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x3e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:12 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x662]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x7c, "9f4c8db08f2e63cbde701e775d50ebe16243164a9eb24d962200f039a0e0db673d1d48935a2e89a6b9f7f170b6e7c447fe94d97db26f16d880db9c1777b6063fbd88a1ed4b679dfb8a5d8bfd657c35329c3834718d8b09de877daf598078e340670ec6c94b09ce26085eb7dae6b6791f5fe9dad2bc6b826862086aa2"}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r1, 0x8a5, 0x1, [0x7fff]}, 0xa) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x7f, 0xfffffffffffffd41, &(0x7f0000000040)=0x4fa8}) 19:07:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x168, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f00000002c0)="80", 0x1}]) [ 441.918761] FAT-fs (loop0): Directory bread(block 2571) failed [ 441.956633] FAT-fs (loop0): Directory bread(block 2572) failed [ 442.058803] FAT-fs (loop2): Directory bread(block 128) failed [ 442.080746] FAT-fs (loop2): Directory bread(block 129) failed [ 442.090260] FAT-fs (loop2): Directory bread(block 130) failed [ 442.101868] FAT-fs (loop2): Directory bread(block 131) failed [ 442.116502] FAT-fs (loop2): Directory bread(block 132) failed [ 442.124476] FAT-fs (loop2): Directory bread(block 133) failed [ 442.130680] FAT-fs (loop2): Directory bread(block 134) failed [ 442.136792] FAT-fs (loop2): Directory bread(block 135) failed [ 442.143090] FAT-fs (loop2): Directory bread(block 136) failed [ 442.149201] FAT-fs (loop2): Directory bread(block 137) failed [ 442.169417] attempt to access beyond end of device [ 442.174457] loop2: rw=2049, want=311, limit=128 19:07:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1f8, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:12 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x88a8ffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_names\x00') ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="240000002c0007031dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0xfffffffffffff7d}, 0x0) restart_syscall() 19:07:12 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xaaaaaaaaaaaabd6, &(0x7f0000000000), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='Hid=3,\x00']) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000180)='mounts\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 19:07:12 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x6c00}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8800000, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xa301000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x24, 0x1) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x78, 0xd773, 0x3, 0x0, 0xffffffffffffff00, 0x2, 0x0, [], 0x7}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 19:07:12 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x83ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x13f, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 442.422201] FAT-fs (loop2): Directory bread(block 128) failed 19:07:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xa100000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 442.480476] FAT-fs (loop2): Directory bread(block 129) failed [ 442.545639] FAT-fs (loop2): Directory bread(block 130) failed [ 442.591774] FAT-fs (loop2): Directory bread(block 131) failed [ 442.623748] FAT-fs (loop2): Directory bread(block 132) failed [ 442.636772] FAT-fs (loop2): Directory bread(block 133) failed [ 442.645156] FAT-fs (loop2): Directory bread(block 134) failed [ 442.673422] FAT-fs (loop2): Directory bread(block 135) failed [ 442.689985] FAT-fs (loop2): Directory bread(block 136) failed 19:07:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x18000000) 19:07:12 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8100], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x143, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x4000000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:12 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 442.715462] FAT-fs (loop2): Directory bread(block 137) failed [ 442.759857] attempt to access beyond end of device [ 442.764909] loop2: rw=2049, want=311, limit=128 [ 442.790981] FAT-fs (loop0): Directory bread(block 2563) failed 19:07:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x18e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:12 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8848], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 442.808604] FAT-fs (loop0): Directory bread(block 2564) failed [ 442.827710] FAT-fs (loop0): Directory bread(block 2565) failed [ 442.848834] FAT-fs (loop0): Directory bread(block 2566) failed 19:07:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, r0, &(0x7f00000002c0)="80", 0x1}]) [ 442.863185] FAT-fs (loop0): Directory bread(block 2567) failed [ 442.885251] FAT-fs (loop0): Directory bread(block 2568) failed [ 442.899647] FAT-fs (loop0): Directory bread(block 2569) failed 19:07:13 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 442.932764] FAT-fs (loop0): Directory bread(block 2570) failed [ 442.969394] FAT-fs (loop0): Directory bread(block 2571) failed [ 442.986645] FAT-fs (loop2): Directory bread(block 128) failed [ 442.997615] FAT-fs (loop0): Directory bread(block 2572) failed [ 443.005808] FAT-fs (loop2): Directory bread(block 129) failed [ 443.036178] FAT-fs (loop2): Directory bread(block 130) failed [ 443.060790] FAT-fs (loop2): Directory bread(block 131) failed [ 443.083144] FAT-fs (loop2): Directory bread(block 132) failed [ 443.090192] FAT-fs (loop2): Directory bread(block 133) failed [ 443.117733] FAT-fs (loop2): Directory bread(block 134) failed [ 443.146317] FAT-fs (loop2): Directory bread(block 135) failed [ 443.154823] FAT-fs (loop2): Directory bread(block 136) failed [ 443.162256] FAT-fs (loop2): Directory bread(block 137) failed 19:07:13 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x4000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x9c, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:13 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x93ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:13 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x400, 0x0, 0x8000, 0x1, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1, 0x73, "7ffb1f0c1f9bfab1308634c19ee2f4dccc5441981fae44bba84fa1e912424a1bd0e94ecf68315b2e0b067cde74106d7306f145ba84a86b1926f835059c4b0f0ea3c2fbb3a51775381cc9474941019f3450403539314460999730dc365898b1d2a943ff8bc87166831e629d030f0a2a2d135f31"}, &(0x7f0000000280)=0x7b) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x4}}, 0x80, 0x6462}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}}, 0x84) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 19:07:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f00000000c0)=0x1000, 0x4) set_thread_area(&(0x7f0000000000)={0x400, 0xffffffff, 0xffffffff, 0x43, 0x10001, 0x3, 0x6, 0x400, 0xffffffffffff8001, 0x8}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc00455d0, &(0x7f0000000040)) [ 443.189050] attempt to access beyond end of device [ 443.194110] loop2: rw=2049, want=311, limit=128 19:07:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x9e00, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 443.276923] FAT-fs (loop0): Directory bread(block 2563) failed [ 443.312424] FAT-fs (loop0): Directory bread(block 2564) failed 19:07:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffff000000000000, r0, &(0x7f00000002c0)="80", 0x1}]) [ 443.333198] FAT-fs (loop0): Directory bread(block 2565) failed [ 443.340371] FAT-fs (loop0): Directory bread(block 2566) failed [ 443.366175] FAT-fs (loop0): Directory bread(block 2567) failed [ 443.425362] FAT-fs (loop0): Directory bread(block 2568) failed [ 443.452243] FAT-fs (loop0): Directory bread(block 2569) failed [ 443.460415] FAT-fs (loop0): Directory bread(block 2570) failed [ 443.467095] FAT-fs (loop0): Directory bread(block 2571) failed 19:07:13 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8035], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:13 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775b005e381e5b3b60ced5c54dbfe0200bee3e781190e433b9b60b7295df0df", 0x21) 19:07:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x3b, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xfffff000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa00) [ 443.473520] FAT-fs (loop0): Directory bread(block 2572) failed [ 443.510319] FAT-fs (loop2): Directory bread(block 128) failed [ 443.545308] FAT-fs (loop2): Directory bread(block 129) failed 19:07:13 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8864000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x84140, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e23, @broadcast=0xffffffff}, {0x306, @random="dc9c400fdea1"}, 0x2, {0x2, 0x4e20, @loopback=0x7f000001}, 'erspan0\x00'}) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000000e8287150342585cb6c22be4268db24b934320045946d63ea154db3d85196d6a2b217d25c9612c58a149b8d27052ecae1a1965351b718801569d40529e63113a6fb93321df988602dca06c3d8e85b78807573eb38a42d124ceeac7e579b1811efa0e009c1954c0a5fd5844920026e87b9d19b61655b8d52fd4795000000000000000000000000"]) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x200000) 19:07:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1c, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 443.573469] FAT-fs (loop2): Directory bread(block 130) failed [ 443.583210] FAT-fs (loop2): Directory bread(block 131) failed [ 443.589919] FAT-fs (loop2): Directory bread(block 132) failed [ 443.597085] FAT-fs (loop2): Directory bread(block 133) failed [ 443.604007] FAT-fs (loop2): Directory bread(block 134) failed [ 443.611941] FAT-fs (loop2): Directory bread(block 135) failed 19:07:13 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fefff77a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000660000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xfffffffffffffe63, 0xd7, &(0x7f0000000280)="3c2dbcd405e8e96a639a2feea71b", &(0x7f0000000380)=""/215}, 0x28) [ 443.619532] FAT-fs (loop2): Directory bread(block 136) failed [ 443.637526] FAT-fs (loop2): Directory bread(block 137) failed [ 443.674109] attempt to access beyond end of device [ 443.679174] loop2: rw=2049, want=311, limit=128 [ 443.734521] FAT-fs (loop0): Directory bread(block 2563) failed [ 443.784170] FAT-fs (loop0): Directory bread(block 2564) failed [ 443.809248] FAT-fs (loop0): Directory bread(block 2565) failed [ 443.816945] FAT-fs (loop0): Directory bread(block 2566) failed [ 443.827672] FAT-fs (loop0): Directory bread(block 2567) failed [ 443.837227] FAT-fs (loop0): Directory bread(block 2568) failed [ 443.854351] FAT-fs (loop0): Directory bread(block 2569) failed [ 443.881390] FAT-fs (loop0): Directory bread(block 2570) failed [ 443.891529] FAT-fs (loop0): Directory bread(block 2571) failed [ 443.911144] FAT-fs (loop0): Directory bread(block 2572) failed 19:07:14 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x8000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:14 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8847000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x25, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xf4ffffff00000000, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000461fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-serpent-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 19:07:14 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="67690000000400"]) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xb55) 19:07:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xb8020000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 444.056388] FAT-fs (loop0): Unrecognized mount option "gi" or missing value 19:07:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x214, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:14 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xff000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 444.099805] FAT-fs (loop2): Directory bread(block 128) failed [ 444.107516] FAT-fs (loop0): Unrecognized mount option "gi" or missing value 19:07:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6f2b7e27d75e9889ccec13b7ffccd435776a18695f7d0c108405600994edebaf", 0x20}], 0x1, &(0x7f0000000400)}, 0x0) io_setup(0x7ff, &(0x7f0000000f40)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340), 0x87}]) 19:07:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xfffffff0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 444.157295] FAT-fs (loop2): Directory bread(block 129) failed [ 444.221329] FAT-fs (loop2): Directory bread(block 130) failed [ 444.265313] FAT-fs (loop2): Directory bread(block 131) failed [ 444.274368] FAT-fs (loop2): Directory bread(block 132) failed [ 444.311804] FAT-fs (loop2): Directory bread(block 133) failed [ 444.324123] FAT-fs (loop2): Directory bread(block 134) failed [ 444.347707] FAT-fs (loop2): Directory bread(block 135) failed 19:07:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb) 19:07:14 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') ioctl(r0, 0x5, &(0x7f00000001c0)="22f1989b4d94b66c3934b9897c87b8b7dbe0c46f9492fe88a7ca9a11609bce9b8dc1dda5294e1bf1c2e850ca61fedc4e43ec090ee184e83332d4eea3d911b7df2530e958d3bf0ba085ac0110d392e6da00d6f30869d9574a603f011cbf3dc1ffb9b73da480833c2ffec1f9497449cb816b2ebeaa129a40ab1572344ef1d80226b64ad2caf78acaa46e010225df29f6f2b0fcdf43e311f08c057da19a348284e3882688347d8f53c9820bcc773d1cbf9b070e4522c08b02a9e029a6ecdf7a7f34ecaaf6b2fcdfc5f3eab66b05e23c70422d21ab4398ba90") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x115280) 19:07:14 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x4305000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2a1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x53, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 444.361278] FAT-fs (loop2): Directory bread(block 136) failed [ 444.369590] FAT-fs (loop2): Directory bread(block 137) failed [ 444.425572] attempt to access beyond end of device [ 444.430606] loop2: rw=2049, want=311, limit=128 [ 444.441260] FAT-fs (loop0): Directory bread(block 2563) failed [ 444.510970] FAT-fs (loop0): Directory bread(block 2564) failed [ 444.530382] FAT-fs (loop0): Directory bread(block 2565) failed [ 444.551532] FAT-fs (loop0): Directory bread(block 2566) failed [ 444.565107] FAT-fs (loop0): Directory bread(block 2567) failed [ 444.571542] FAT-fs (loop0): Directory bread(block 2568) failed [ 444.578177] FAT-fs (loop0): Directory bread(block 2569) failed [ 444.584334] FAT-fs (loop0): Directory bread(block 2570) failed [ 444.601656] FAT-fs (loop0): Directory bread(block 2571) failed [ 444.629695] FAT-fs (loop0): Directory bread(block 2572) failed 19:07:14 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x1000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x141000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)) dup2(r0, r3) dup3(r0, r1, 0x0) 19:07:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x66, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000000, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:14 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x81ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:14 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) 19:07:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x390, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:14 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3300000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x49, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 444.817675] FAT-fs (loop0): Directory bread(block 2563) failed [ 444.829368] FAT-fs (loop2): Directory bread(block 128) failed 19:07:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2605000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 444.863866] FAT-fs (loop2): Directory bread(block 129) failed [ 444.876316] FAT-fs (loop0): Directory bread(block 2564) failed 19:07:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=@getlink={0x28, 0x12, 0x5, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockname$inet(r1, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) [ 444.908735] FAT-fs (loop2): Directory bread(block 130) failed [ 444.911737] FAT-fs (loop0): Directory bread(block 2565) failed [ 444.942702] FAT-fs (loop2): Directory bread(block 131) failed [ 444.954703] FAT-fs (loop0): Directory bread(block 2566) failed [ 444.981390] FAT-fs (loop0): Directory bread(block 2567) failed [ 444.984125] FAT-fs (loop2): Directory bread(block 132) failed [ 445.009502] FAT-fs (loop0): Directory bread(block 2568) failed [ 445.027227] FAT-fs (loop0): Directory bread(block 2569) failed [ 445.049943] FAT-fs (loop2): Directory bread(block 133) failed [ 445.071399] FAT-fs (loop0): Directory bread(block 2570) failed 19:07:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb00000000000000) 19:07:15 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3c000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x102000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x135, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:15 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='data=jourSal,\x00']) [ 445.084397] FAT-fs (loop2): Directory bread(block 134) failed [ 445.098489] FAT-fs (loop2): Directory bread(block 135) failed [ 445.104704] FAT-fs (loop0): Directory bread(block 2571) failed [ 445.127514] FAT-fs (loop0): Directory bread(block 2572) failed [ 445.138815] FAT-fs (loop2): Directory bread(block 136) failed [ 445.148588] EXT4-fs (loop3): Unrecognized mount option "data=jourSal" or missing value [ 445.174646] FAT-fs (loop2): Directory bread(block 137) failed [ 445.229689] attempt to access beyond end of device [ 445.231244] EXT4-fs (loop3): Unrecognized mount option "data=jourSal" or missing value [ 445.234819] loop2: rw=2049, want=311, limit=128 19:07:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xe5, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:15 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x86ddffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:15 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000001c0)=""/159, &(0x7f0000000140)=0x9f) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x10400) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x6af625ab0078c32c, 0x0) 19:07:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000012, 0x43, 0x4, 0x1, 0x0, 0x1}, 0x2c) r1 = dup3(r0, r0, 0x80000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x10) 19:07:15 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x7000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xf4ffffff, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 445.480431] FAT-fs (loop0): Directory bread(block 2563) failed 19:07:15 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)="79732f6e65742f697076342f76732f73fd6f7070795f736374700000002fad391e58a9448de389a595f54406de5e930e0000000000c2e3599371cac8dc511303e2295a6487658cf4be6421f9105f5927815f406adc0de01f564b9fd2878d4d817c2c49c7109cc849298298897593e4ae", 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040)={[0x38, 0x32, 0x2f, 0x30, 0x31, 0x36, 0x38]}, 0xffffffffffffff9d) 19:07:15 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff80], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x84, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xfeffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 445.546403] FAT-fs (loop2): Directory bread(block 128) failed [ 445.548410] FAT-fs (loop0): Directory bread(block 2564) failed [ 445.566276] FAT-fs (loop0): Directory bread(block 2565) failed [ 445.589668] FAT-fs (loop0): Directory bread(block 2566) failed [ 445.619915] FAT-fs (loop2): Directory bread(block 129) failed [ 445.628238] FAT-fs (loop0): Directory bread(block 2567) failed [ 445.661931] FAT-fs (loop0): Directory bread(block 2568) failed [ 445.668154] FAT-fs (loop2): Directory bread(block 130) failed [ 445.701959] FAT-fs (loop2): Directory bread(block 131) failed [ 445.705246] FAT-fs (loop0): Directory bread(block 2569) failed [ 445.711922] FAT-fs (loop2): Directory bread(block 132) failed [ 445.740436] FAT-fs (loop2): Directory bread(block 133) failed [ 445.751594] FAT-fs (loop2): Directory bread(block 134) failed 19:07:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xffff000000000000) 19:07:15 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8fffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:15 executing program 3: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x6, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x110) setresgid(r2, r3, r4) 19:07:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x106, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xb802, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 445.757754] FAT-fs (loop2): Directory bread(block 135) failed [ 445.760476] FAT-fs (loop0): Directory bread(block 2570) failed [ 445.764212] FAT-fs (loop2): Directory bread(block 136) failed [ 445.780072] FAT-fs (loop2): Directory bread(block 137) failed [ 445.789356] FAT-fs (loop0): Directory bread(block 2571) failed [ 445.834928] attempt to access beyond end of device [ 445.839972] loop2: rw=2049, want=311, limit=128 [ 445.842537] FAT-fs (loop0): Directory bread(block 2572) failed 19:07:16 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x81000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x182, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:16 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 19:07:16 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000100)={[0x2000, 0x4000, 0xf000], 0xffff, 0xf8, 0x3}) ioctl$fiemap(r0, 0x40086602, &(0x7f0000001400)=ANY=[@ANYPTR64=&(0x7f00000013c0)=ANY=[]]) [ 446.065144] FAT-fs (loop0): Directory bread(block 2563) failed [ 446.083192] FAT-fs (loop0): Directory bread(block 2564) failed [ 446.103744] FAT-fs (loop0): Directory bread(block 2565) failed [ 446.110655] FAT-fs (loop0): Directory bread(block 2566) failed [ 446.121535] FAT-fs (loop0): Directory bread(block 2567) failed [ 446.127819] FAT-fs (loop0): Directory bread(block 2568) failed [ 446.138654] FAT-fs (loop0): Directory bread(block 2569) failed [ 446.150795] FAT-fs (loop0): Directory bread(block 2570) failed [ 446.156987] FAT-fs (loop0): Directory bread(block 2571) failed [ 446.163559] FAT-fs (loop0): Directory bread(block 2572) failed 19:07:16 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x1100}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xd, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:16 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x600], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:16 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x98302, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) fsetxattr(r1, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='trustedeth1\\\x00', 0xd, 0x1) 19:07:16 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0xfffffffffffffd74, 0x6}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10000, 0x6) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000240)) 19:07:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x300000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 446.371681] FAT-fs (loop2): Directory bread(block 128) failed [ 446.393908] FAT-fs (loop2): Directory bread(block 129) failed [ 446.422501] FAT-fs (loop2): Directory bread(block 130) failed [ 446.444901] FAT-fs (loop2): Directory bread(block 131) failed [ 446.465203] FAT-fs (loop2): Directory bread(block 132) failed [ 446.471326] FAT-fs (loop2): Directory bread(block 133) failed [ 446.477990] FAT-fs (loop2): Directory bread(block 134) failed [ 446.484451] FAT-fs (loop2): Directory bread(block 135) failed [ 446.493457] FAT-fs (loop2): Directory bread(block 136) failed [ 446.500413] FAT-fs (loop2): Directory bread(block 137) failed 19:07:16 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1800) 19:07:16 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:16 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@in={0x0, 0x0, @multicast2}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x13, "0b7412696c98c6cab987805fdf6c04d0c7b7ec"}, &(0x7f0000000180)=0x1b) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x800}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65a803000000000000000000000b87262d2428d9ea1c61bd3a000000100000000000000000000000000000"], &(0x7f00000000c0)=0x28) 19:07:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1b, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xfeffffff00000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 446.532482] attempt to access beyond end of device [ 446.537535] loop2: rw=2049, want=311, limit=128 19:07:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x7fffffffffffffff, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:16 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x8}, 0xe132e9be5c0b82b8) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0x400000000000000}, 0x4) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000140)) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="0800000000000000b0600000030000000000000000000000fbffffffff010000000000000000000000000000000000000000000000000000100e000007000000000000000000000008000000787f000000000000000000000000000000000000000000000000000001010000000400000000000000000000003600000000000000010000000000000004000000000000000800000009000000ffffffff0200000000000000000000006a0f00000000000008000000000000000242000000000000a0000000010000000700000001000000000000000000000000080000020000000000000000000000000000000000fe000000000000000000070000000700000000000000000000000800000009000000020008000000000000000000000000000000000000000000010000000400000000000000000000000010000084ffffff000000000000000000000000000000000000000000000000040000000400000000000000000000000900000002000000000000000000000000000000000000000000000000000000"]) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) 19:07:16 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xd00], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x65, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 446.752624] FAT-fs (loop2): Directory bread(block 128) failed [ 446.777636] FAT-fs (loop2): Directory bread(block 129) failed [ 446.784598] FAT-fs (loop2): Directory bread(block 130) failed [ 446.793820] FAT-fs (loop2): Directory bread(block 131) failed [ 446.816432] FAT-fs (loop2): Directory bread(block 132) failed [ 446.842482] FAT-fs (loop2): Directory bread(block 133) failed [ 446.875246] FAT-fs (loop2): Directory bread(block 134) failed [ 446.895184] FAT-fs (loop2): Directory bread(block 135) failed [ 446.906716] FAT-fs (loop2): Directory bread(block 136) failed [ 446.912955] FAT-fs (loop2): Directory bread(block 137) failed [ 446.937503] attempt to access beyond end of device [ 446.942543] loop2: rw=2049, want=311, limit=128 19:07:17 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x4600}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:17 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8cffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:17 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00fe53ca38c03440a20c144317faad991863f7eb40febddbbb3a86fcac5639c361cde18c7e7ff811a7caacdc5c893215f274864ef2cea88db8bdc0e79e9487f6372ea9bb6ab2a7431347247b07cf7768cb06008979d99ad7961f3ae6c313cf74bb2d89f296dca5b51927b23c0075728d14fc490223dde5087fc08029c7f6a797290efd7a8bc604ad81bfa1c7e403d8e9f107"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 19:07:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xa9, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8000000000000000, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:17 executing program 3: r0 = socket(0x10, 0x803, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3") r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@random={'system.', 'mime_type{@\x00'}) sendfile(r0, r1, &(0x7f0000000000), 0x80000002) lseek(0xffffffffffffffff, 0x0, 0x5) r3 = fcntl$dupfd(r1, 0x406, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7fff, 0x7, 0x1, 0x1, 0x8, 0x9, 0x1, 0x2, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x4d, "1ef9ab70ec5973ef4c004c3c8b460674ebc15be7516b8bf1b71b77a87b5b694c39e2779373906dff9f024877fb40ebb70bafe20784ae9f47ced29121369535f9f4b7694c1fda477d1939fd22aa"}, &(0x7f0000000300)=0x55) 19:07:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xffffff7f, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 447.076622] FAT-fs (loop0): invalid media value (0x74) [ 447.082063] FAT-fs (loop0): Can't find a valid FAT filesystem [ 447.177332] FAT-fs (loop2): Directory bread(block 128) failed [ 447.222338] FAT-fs (loop0): invalid media value (0x74) [ 447.224119] FAT-fs (loop2): Directory bread(block 129) failed [ 447.227720] FAT-fs (loop0): Can't find a valid FAT filesystem [ 447.275353] FAT-fs (loop2): Directory bread(block 130) failed [ 447.282384] FAT-fs (loop2): Directory bread(block 131) failed [ 447.316541] FAT-fs (loop2): Directory bread(block 132) failed [ 447.324150] FAT-fs (loop2): Directory bread(block 133) failed [ 447.337244] FAT-fs (loop2): Directory bread(block 134) failed 19:07:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x500) 19:07:17 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x88a8ffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x175, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xa100, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:17 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) [ 447.362891] FAT-fs (loop2): Directory bread(block 135) failed [ 447.370862] FAT-fs (loop2): Directory bread(block 136) failed [ 447.400457] FAT-fs (loop0): Directory bread(block 2563) failed 19:07:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x18b, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:17 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8fffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000080)=@routing={0xff, 0x0, 0x2, 0xe56f, 0x0, [@empty, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80, [], 0x17}, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @empty]}, 0xffffffffffffff08) [ 447.424746] FAT-fs (loop2): Directory bread(block 137) failed [ 447.443550] FAT-fs (loop0): Directory bread(block 2564) failed [ 447.454689] FAT-fs (loop0): Directory bread(block 2565) failed [ 447.498398] attempt to access beyond end of device [ 447.503474] loop2: rw=2049, want=311, limit=128 [ 447.512138] FAT-fs (loop0): Directory bread(block 2566) failed 19:07:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1c0, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 447.541672] FAT-fs (loop0): Directory bread(block 2567) failed [ 447.572467] FAT-fs (loop0): Directory bread(block 2568) failed [ 447.605292] FAT-fs (loop0): Directory bread(block 2569) failed [ 447.625452] FAT-fs (loop0): Directory bread(block 2570) failed [ 447.655384] FAT-fs (loop0): Directory bread(block 2571) failed [ 447.678314] FAT-fs (loop0): Directory bread(block 2572) failed 19:07:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffff7f, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x8, 0x4, 0x4000000000004, 0x1ff, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000000200)="fadd4295d62778e91fcc1fec80b3bf20c4a4cf1a965aaa35c9a19644edeaf47420f47a56cdc138e343802d23c726cabdf0e2bd416f63397a6d9acb1071d22c29fdb1c224859d437e600e061368e189101c19135bda448803e689558ba236a6a40c2b0c5d2e1b187f2a84eb8ad80039a137280b8eabb26d9771ae52caa5778d50414e09", 0x10000}, 0xfffffe48) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x101080) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/107) 19:07:17 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8847], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x13e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:17 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x8febc4515325d767) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 19:07:17 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x1100000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x9e, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 447.895552] FAT-fs (loop0): Directory bread(block 2563) failed [ 447.902411] FAT-fs (loop2): Directory bread(block 128) failed [ 447.927429] FAT-fs (loop2): Directory bread(block 129) failed [ 447.939411] FAT-fs (loop0): Directory bread(block 2564) failed [ 447.965186] FAT-fs (loop2): Directory bread(block 130) failed [ 447.965291] FAT-fs (loop0): Directory bread(block 2565) failed [ 447.993363] FAT-fs (loop2): Directory bread(block 131) failed [ 448.016187] FAT-fs (loop2): Directory bread(block 132) failed [ 448.017665] FAT-fs (loop0): Directory bread(block 2566) failed [ 448.032313] FAT-fs (loop2): Directory bread(block 133) failed [ 448.041481] FAT-fs (loop0): Directory bread(block 2567) failed [ 448.048160] FAT-fs (loop2): Directory bread(block 134) failed [ 448.049361] FAT-fs (loop0): Directory bread(block 2568) failed 19:07:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd) 19:07:18 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x6488], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:18 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040845) fdatasync(r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xa48}) sysfs$2(0x2, 0x200, &(0x7f0000000280)=""/143) 19:07:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x9103000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x170, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 448.061446] FAT-fs (loop0): Directory bread(block 2569) failed [ 448.066447] FAT-fs (loop2): Directory bread(block 135) failed [ 448.067640] FAT-fs (loop0): Directory bread(block 2570) failed [ 448.079764] FAT-fs (loop2): Directory bread(block 136) failed [ 448.086355] FAT-fs (loop0): Directory bread(block 2571) failed [ 448.092528] FAT-fs (loop2): Directory bread(block 137) failed [ 448.100045] FAT-fs (loop0): Directory bread(block 2572) failed 19:07:18 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6769643d332c0027c4a8b0a117c39f7c59adb391652d097390dcb657d20f8612c60a0463163b7f670100000203e57bb84168e0c947a625b2ec611f0354d347b987a52a83370efc9700b5e0546dbe1d04fe376193e12c4287a275576060ea2c400876bd056e693284903379d559ca38d2734e32fc41cf48c8dbb320c56e5d26f3ea0e0a4360835413d7aefeb7b805468b1f81839e9078a46b4c5e5f1dbd9d46ff5511e252903fd491f054da75cb9727d7ba64e8b7baaf6970f62cdcba9396eaef9fdf904bc29f12"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) [ 448.151858] attempt to access beyond end of device [ 448.156919] loop2: rw=2049, want=311, limit=128 19:07:18 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff8d], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1de, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:18 executing program 3: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@broadcast=0xffffffff, 0x4e23, 0xfffffffffffffffe, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x2, r3, r4}, {0x7ff, 0x3, 0x6, 0x1325, 0x1000, 0x5, 0x8, 0x7f}, {0xffff, 0x401, 0x5, 0x401}, 0x9, 0x0, 0x3, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d6, 0x7f}, 0xa, @in, 0x3501, 0x5, 0x3, 0x400, 0x2, 0x3ff, 0x3}}, 0xe8) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x238, r6, 0x904, 0x70bd25, 0x25dfdbfd, {0x1}, [{{0x8, 0x1, r3}, {0x21c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xd4f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x497b}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x586}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x999}}}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x6000) 19:07:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x800800000000, r0, &(0x7f00000002c0)="80", 0x1}]) [ 448.298560] FAT-fs (loop0): Directory bread(block 2563) failed 19:07:18 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x88caffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 448.345296] FAT-fs (loop0): Directory bread(block 2564) failed 19:07:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x69, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 448.387206] FAT-fs (loop0): Directory bread(block 2565) failed [ 448.416545] FAT-fs (loop2): Directory bread(block 128) failed 19:07:18 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x806000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 448.442316] FAT-fs (loop0): Directory bread(block 2566) failed [ 448.451912] FAT-fs (loop2): Directory bread(block 129) failed [ 448.476920] FAT-fs (loop2): Directory bread(block 130) failed [ 448.486289] FAT-fs (loop0): Directory bread(block 2567) failed [ 448.504965] FAT-fs (loop2): Directory bread(block 131) failed [ 448.517766] FAT-fs (loop0): Directory bread(block 2568) failed [ 448.527135] FAT-fs (loop2): Directory bread(block 132) failed [ 448.546159] FAT-fs (loop0): Directory bread(block 2569) failed 19:07:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x77, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 448.552330] FAT-fs (loop2): Directory bread(block 133) failed [ 448.575719] FAT-fs (loop0): Directory bread(block 2570) failed [ 448.593349] FAT-fs (loop0): Directory bread(block 2571) failed [ 448.602262] FAT-fs (loop2): Directory bread(block 134) failed [ 448.610095] FAT-fs (loop0): Directory bread(block 2572) failed [ 448.638952] FAT-fs (loop2): Directory bread(block 135) failed [ 448.678220] FAT-fs (loop2): Directory bread(block 136) failed [ 448.700420] FAT-fs (loop2): Directory bread(block 137) failed 19:07:18 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x2000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:18 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x85ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 448.745452] attempt to access beyond end of device [ 448.750487] loop2: rw=2049, want=311, limit=128 19:07:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1e00000000000000) 19:07:19 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe7fd, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000300)="eb3c906d6b66732e666174000204010a0200027400f801", 0xfffffffffffffedd}], 0x0, &(0x7f00000001c0)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="88a56ef037f7f9f29748e9e2a16d1581", 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x24002, 0x0) 19:07:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1d, &(0x7f0000000000)=0x800, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 19:07:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x19d, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x68010000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000000, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff83], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x806], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000040)={{0x7e, @empty, 0x4e24, 0x0, 'rr\x00', 0x4, 0x2, 0x10}, {@multicast2=0xe0000002, 0x4e21, 0x0, 0x6, 0x9, 0xf0a}}, 0x44) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000fa0edd591dc59c93db6c219619df63ac96521b7c4aa7fe04117a970d599f4a255dd56f12844f85d6f06c5ea4b50d373816d48d3551a4e793e601ad63b19cf8ce89c419f945f14ee2f74f4e62e661eb8c48730d8de706de72cf55dbf7aeede0c07c1ccf67a1a2c37b29c86eb24e02fb6dd2106974d35b9e31f9ce8e4d24ee2f5d617521c74431239a8475030399deec0bc35a09364d5c65db2d0c1def8c", @ANYRES16=r3, @ANYBLOB="01010000000000000000030000000800020002000000"], 0x1c}, 0x1}, 0x0) r4 = dup2(r0, r1) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 19:07:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x145, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 449.001679] FAT-fs (loop2): Directory bread(block 128) failed [ 449.032929] FAT-fs (loop2): Directory bread(block 129) failed [ 449.050850] FAT-fs (loop2): Directory bread(block 130) failed [ 449.105146] FAT-fs (loop2): Directory bread(block 131) failed [ 449.125868] FAT-fs (loop2): Directory bread(block 132) failed [ 449.132528] FAT-fs (loop2): Directory bread(block 133) failed [ 449.140015] FAT-fs (loop2): Directory bread(block 134) failed 19:07:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x94, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x608], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 449.160969] FAT-fs (loop2): Directory bread(block 135) failed [ 449.186670] FAT-fs (loop2): Directory bread(block 136) failed 19:07:19 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt(r0, 0x20000100000114, 0xa, &(0x7f00003cbffc)="02000000", 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) read(r0, &(0x7f000083b000)=""/1, 0x1) sendmsg$alg(r0, &(0x7f0000159fc8)={0x0, 0x0, &(0x7f0000fc8000), 0x0, &(0x7f0000000e8e)}, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) [ 449.216642] FAT-fs (loop2): Directory bread(block 137) failed 19:07:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x103, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 449.289920] attempt to access beyond end of device [ 449.295010] loop2: rw=2049, want=311, limit=128 19:07:19 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0xff00}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8906000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c000000) 19:07:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8008, r0, &(0x7f00000002c0)="80", 0x1}]) 19:07:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xf5, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x91030000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8dffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:19 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8}}, 0x0, 0xf9, 0x9, 0x3d, 0x20}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000002400)={r1, 0x1000, "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"}, &(0x7f0000000440)=0x1008) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f0000000100)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="30c6df5788f13a83da9341f0f4b045abd9800d4a6511cd9019da2ff0f3637b7e342cb36ccfdcbee9874449b1ab30e849e5dcc979acc6e2870380e7f3ef8f8bc74e759e0f0d51381b1feb0d28ddf7619e61c9f2e5656f4e20e519c9b1c6d1051185aa5f408f95a2c40355ce6aae9cb50bea8fbfe5c9b9fe29fc9abc95c9ceb637e1f7722576d091856c23012463ec570ad7a36b5993189c04420dac9ff769f27b2be44b75ade243401876e6cca2a4727f25d5c32ad8b277b2993a9ce48c4d223192fb5682f1896accad01f4e0df46925b966d824a816d9352d95b85138f5fce64a5f82b7fbfad5c", 0xe7, 0x81}], 0x2, &(0x7f0000000300)='\x00') 19:07:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x7000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 449.746968] FAT-fs (loop2): Directory bread(block 128) failed [ 449.750303] FAT-fs (loop0): Directory bread(block 2563) failed [ 449.767137] FAT-fs (loop2): Directory bread(block 129) failed [ 449.782631] FAT-fs (loop2): Directory bread(block 130) failed 19:07:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x132, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 449.793463] FAT-fs (loop0): Directory bread(block 2564) failed [ 449.802434] FAT-fs (loop0): Directory bread(block 2565) failed [ 449.818274] FAT-fs (loop0): Directory bread(block 2566) failed [ 449.825660] FAT-fs (loop2): Directory bread(block 131) failed [ 449.837776] FAT-fs (loop0): Directory bread(block 2567) failed 19:07:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x689], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x199, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 449.846463] FAT-fs (loop2): Directory bread(block 132) failed [ 449.860784] FAT-fs (loop0): Directory bread(block 2568) failed [ 449.869142] FAT-fs (loop2): Directory bread(block 133) failed [ 449.877172] FAT-fs (loop0): Directory bread(block 2569) failed [ 449.894198] FAT-fs (loop2): Directory bread(block 134) failed [ 449.906081] FAT-fs (loop0): Directory bread(block 2570) failed [ 449.916147] FAT-fs (loop2): Directory bread(block 135) failed [ 449.923251] FAT-fs (loop0): Directory bread(block 2571) failed [ 449.938338] FAT-fs (loop2): Directory bread(block 136) failed 19:07:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xf8, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 449.940625] FAT-fs (loop0): Directory bread(block 2572) failed [ 449.945728] FAT-fs (loop2): Directory bread(block 137) failed [ 449.976768] attempt to access beyond end of device [ 449.981829] loop2: rw=2049, want=311, limit=128 19:07:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000000000000000000000000000030006000000000002000000e00000010000000000000000030005000000000002000000e00000010000000000000000ef4c52c1529d21ae2c8c4c37b919eb79b13317f919d56f044f1d7ca5b86cd544b8882330ee4bbdfa8400f7d4834e8eb119f4c7269161d011c5d292ebd74ae67dcdd87c2c55642142ab80929c9b0ff36d5572456f131f332f64c9145136300c066c5799b6129b998556dc4082311a6461ff2a43d7121bb4c291bfbac6a70f93a36c3020559336dabb"], 0x50}, 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) getrandom(&(0x7f00000000c0)=""/60, 0x3c, 0x3) 19:07:20 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 19:07:20 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x4000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffff000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 450.219240] FAT-fs (loop0): Unrecognized mount option "ËœÖGÔ ÔEÒ#òtlpÚd\à÷EPzÙ¶[ï‚—ätTF Õ̬ùù -´åg–BÁ§-ƒ8Å"™§Ä™`tþ_±•Q(i\U{²ÿÝC`NfuŠÎ|þIý~N#Ð’‡15rÑQ‡^ žçál!'æ{(~}bâ“«þ¦gá¤+Z㶋YAUW_¸\3§5Z½ºýSUxÛ²#ÄÚ$…Pë"~î5¨Êè]1̉³¼žg»Taæ˜\c©¢Œ©” [ 450.219240] »Ã‡bG4UBº¥8Ôg?¯" or missing value [ 450.363431] FAT-fs (loop0): Unrecognized mount option "ËœÖGÔ ÔEÒ#òtlpÚd\à÷EPzÙ¶[ï‚—ätTF Õ̬ùù -´åg–BÁ§-ƒ8Å"™§Ä™`tþ_±•Q(i\U{²ÿÝC`NfuŠÎ|þIý~N#Ð’‡15rÑQ‡^ žçál!'æ{(~}bâ“«þ¦gá¤+Z㶋YAUW_¸\3§5Z½ºýSUxÛ²#ÄÚ$…Pë"~î5¨Êè]1̉³¼žg»Taæ˜\c©¢Œ©” [ 450.363431] »Ã‡bG4UBº¥8Ôg?¯" or missing value 19:07:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb000000) 19:07:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x200002c1}]) 19:07:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x3a, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x88640000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:20 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x14, &(0x7f0000000480), &(0x7f00000004c0)=""/18, 0x12, &(0x7f00000000c0)={&(0x7f0000000440)={'ghash-generic\x00'}}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x13e44872) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000001}, 0xfffffffffffffd2f, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe98e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfe96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr(r1, &(0x7f00000003c0)=@known='security.evm\x00', &(0x7f0000000400)='ghash-generic\x00', 0xe, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @rand_addr}, &(0x7f0000000140)=0xc) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x7, r4, 0x21, 0xffffffffffffff9c}, 0x10) 19:07:20 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="67330008030010"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') recvfrom$inet(r0, &(0x7f00000001c0)=""/130, 0x82, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000640)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1048608}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=@ipv4_newroute={0x78, 0x18, 0x300, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x20, 0xfffffffffffffbff, 0xff, 0x0, 0xff, 0x0, 0x200}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, @RTA_UID={0x8, 0x19, r1}, @RTA_METRICS={0x2c, 0x8, "48cb510928ed35dad5dd69c5d477fdc5c784b4a13e99e51db87dafed80d32c0528ce8c2344e7a4"}, @RTA_GATEWAY={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @RTA_IIF={0x8, 0x1, r2}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}, @RTA_FLOW={0x8, 0xb, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x1) 19:07:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x88caffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x41, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 450.541484] FAT-fs (loop2): Directory bread(block 128) failed [ 450.548909] FAT-fs (loop0): Unrecognized mount option "g3" or missing value [ 450.564643] FAT-fs (loop2): Directory bread(block 129) failed [ 450.571244] FAT-fs (loop2): Directory bread(block 130) failed [ 450.578480] FAT-fs (loop2): Directory bread(block 131) failed [ 450.585640] FAT-fs (loop2): Directory bread(block 132) failed 19:07:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) sendmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='\t', 0x1}], 0x1, &(0x7f0000000280)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) sendfile(r1, r2, &(0x7f0000000240), 0x5) [ 450.595848] FAT-fs (loop2): Directory bread(block 133) failed 19:07:20 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6769642c2000001585c32a58f570932898d370e620346435e0c39f58141b7a5842a409dda563c8a0ce3c0a3c5cb4fc8b730d37c8a1008b71c716b7a2b3fa0dcaa57dbd4061e4a56305e7148b3f57a0fdb537b48d7a250c12be3a17568e9071b5bd7144a65467881200a12a2cc8276315c2a76768b55bbed58d9eab6ccf7b6808320000000000000000000000"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 450.645163] FAT-fs (loop2): Directory bread(block 134) failed [ 450.677990] FAT-fs (loop2): Directory bread(block 135) failed 19:07:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x28000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x9e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 450.696369] FAT-fs (loop2): Directory bread(block 136) failed [ 450.711000] FAT-fs (loop2): Directory bread(block 137) failed 19:07:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="850000000f00000057000000001c00009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x30d3, 0x99, &(0x7f0000000180)=""/153}, 0x48) [ 450.762332] attempt to access beyond end of device [ 450.767362] loop2: rw=2049, want=311, limit=128 [ 450.795846] FAT-fs (loop0): Unrecognized mount option "gid" or missing value [ 450.841839] FAT-fs (loop0): Unrecognized mount option "gid" or missing value [ 451.034728] attempt to access beyond end of device [ 451.039750] loop2: rw=2049, want=310, limit=128 [ 451.044546] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 451.063202] attempt to access beyond end of device [ 451.068318] loop2: rw=2049, want=311, limit=128 [ 451.073063] Buffer I/O error on dev loop2, logical block 310, lost async page write 19:07:21 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x32}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 19:07:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xd000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 451.081432] attempt to access beyond end of device [ 451.086426] loop2: rw=2049, want=312, limit=128 [ 451.091152] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 451.099533] attempt to access beyond end of device [ 451.104500] loop2: rw=2049, want=313, limit=128 [ 451.109207] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 451.117676] attempt to access beyond end of device [ 451.122678] loop2: rw=2049, want=326, limit=128 [ 451.127403] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 451.140337] attempt to access beyond end of device [ 451.145348] loop2: rw=2049, want=327, limit=128 [ 451.150071] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 451.172371] attempt to access beyond end of device [ 451.177380] loop2: rw=2049, want=328, limit=128 [ 451.182402] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 451.192329] attempt to access beyond end of device [ 451.197895] loop2: rw=2049, want=329, limit=128 [ 451.203080] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 451.225099] attempt to access beyond end of device [ 451.230731] loop2: rw=2049, want=2153, limit=128 19:07:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1e000000) 19:07:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x45, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 19:07:21 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 19:07:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x6, &(0x7f0000001580)=[{&(0x7f0000000200)="c9460d824f58264c0d36b4c05a6ec10059dce0a12b6e5b6f871e81631eb29f74f6975b7dcb98ad6e089d5cfe31eebf6432c941b93c5a7690df479545bb93b127f4d2bf50bd3b2da12349b47ba59b0fbab2d46fe04753a970969403e10f78040d738f7bc7580cebb8db6095526813f25c4d711cc1ebae3a4e7baad1ba7df3d0913c1b25ce45ee08094fde73ab811f4eb8d561c829a996eb1e2af2d7259b3fc9b3a4672590256e5f0d710aa95e4fd5e72861e131e52676586da330cb12b2931cb8c92866884e8b735ecaeb78", 0xcb, 0x80}, {&(0x7f0000000300)="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", 0x1000, 0x8}, {&(0x7f0000001300)="dd2a92968cd335616ef5ceea6ea4e437fe72f9da48a1fc49c17672546f6dab7357c7d160fac02ae4019b89d4cbf838024ed790fe4ddbf8abfa9d04f5b98b88ba72f0e87ac75dd857b2f932bf9f5eef91bbd3f327ee4e6c71d878b3e461e184f8461f7995776acd30860164b94839bc79275e2b58a5328d21003164", 0x7b, 0xfffffffffffffff9}, {&(0x7f0000001380)="dd20c88c04d282f780869b8de25325e04dc898ebe66d190a0e026303b421826324f4edd9516ec32144da0565b4536fc23174959564ce21f47790cd97d031640e96701dee1c64c3e3bb48e29f33fd185ed9c57618c45bc15b58a5a28eb930d23bbf19280c5c4841d7820912f9850f8c856e600d908395339d0bafbd6c9c325ece20237ad6020e03c1078af1770e5cccfd38d9d96ad30fe130e2a8e4fa0bfe380c36fb9861dd5844d395e216cba93dc8abe374187f1249642dc3fcd60abb8f092d9b790f393057a25689ba544e5a575dad4f3ae7a24f0bcd8feb4e86da6c621950c5b0362061525f8cdcf9ab3ef0765ade", 0xf0, 0x7}, {&(0x7f0000000140)="1679c38ea79e1ada2d9d2eae", 0xc, 0x2}, {&(0x7f0000001480)="261e430cca71630ceac6bee46da6d8541e86b03cd93a9398230ac4d9019ad8b005121f2ea27fd840de9f409380dfe26b624041122be3a3fcb335122f7324c0f7d665d980db97739b08162588cea5c3976189d28d9afadbec2a4901bdb361469efb3dff728379e25f2a0200e1c9c60ef975f19bd85828174978fdb538e223ad079c507ccf7bdc14c30831cf57542e30b1ab9103d74f195593338fcd70d6d18bd6c4dc53be84f79c880667f11a1983a581345692bee83f278a2798be2c9c8a6c748245f68cd3d26c632e6d5d42b4", 0xcd, 0x87f}], 0x2260049, &(0x7f00000016c0)=ANY=[@ANYBLOB="7569643d3730323436352c6572726f72738c5241ce5559689f5174553d72656d6f756e742d726f2c646d61736b3d32353636302c6e66733d6e6f7374616c655f726f2c00"]) 19:07:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xffffffff00000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 19:07:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x3c9}]) 19:07:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8035000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3580], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 451.360479] FAT-fs (loop0): Unrecognized mount option "}iÒ˜.ý; Fÿ•d=3" or missing value [ 451.389986] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 19:07:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xe2, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 451.478862] FAT-fs (loop0): Unrecognized mount option "}iÒ˜.ý; Fÿ•d=3" or missing value [ 451.502424] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 19:07:21 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6569643d332c89"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1128}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x800, 0x3, 0xd02, 0x2, 0x2}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0x75ca, 0xef, "7895926369d4aeb62689395b0be3b8c89a44abab890a1352fd52add9528bdfc60f624df49c6e5b0d86efdec1cf2dc56d2c582d89a1ab1bb383a123cee1304c8b6177e67d742acc8e345855dfae131acdf638e105664bee6aec11d5bb98d094cf435e26505b7ce22ecd1c09b9b908a0588024c24853e66d4f6e681e4fa705df69a4f2220d73539bc45bfac1f4a5cc724c3a755ba49f0c8e0e43e3240017dea9c0bfa1dd46c2b9d5d1afed37ed34c7039c1f80b81c2319b79f28298edf57f70033a90a079cf633883e7876451ef3de2a52f01d15bfdd515526d298f593155e1a801cf7e563fdf45b3755505b60394cfa"}, 0xf7) pipe(&(0x7f0000000080)) 19:07:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ftruncate(r0, 0xffff) ioctl(r0, 0x80000000f5, &(0x7f00000000c0)="295ee1311f16f477671070") clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 19:07:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x80ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 19:07:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x12f, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 451.656814] FAT-fs (loop2): Directory bread(block 128) failed [ 451.691926] FAT-fs (loop2): Directory bread(block 129) failed [ 451.730613] FAT-fs (loop2): Directory bread(block 130) failed [ 451.740777] FAT-fs (loop0): Unrecognized mount option "eid=3" or missing value 03:33:20 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x60080, 0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x7f, r0, &(0x7f0000000040)="666b0dee57325ba12f734e635a5a278b464f17cd75c495ea352841c2cf27782340b192be32a08c87a9445f50b7ce60385d6753d69635bac91d46e12ce4eee3445e53fe694a770b0ec36f2e8baef65eb5f717109479f320a057c6170bb9bd6b9c2499426faa964d37abb5bbeb78b801ba172f042324eab1856e5473a2", 0x7c, 0x100000001, 0x0, 0x1f88c3e579a8ee8f, r3}]) tkill(r1, 0x34) ptrace$pokeuser(0x6, r1, 0x358, 0x0) [ 451.776285] FAT-fs (loop2): Directory bread(block 131) failed [ 451.797464] FAT-fs (loop2): Directory bread(block 132) failed 03:33:20 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x5000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x82ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 451.825133] FAT-fs (loop0): Unrecognized mount option "eid=3" or missing value [ 451.891110] FAT-fs (loop2): Directory bread(block 133) failed [ 451.915214] FAT-fs (loop2): Directory bread(block 134) failed [ 451.926980] FAT-fs (loop2): Directory bread(block 135) failed [ 451.943098] FAT-fs (loop2): Directory bread(block 136) failed [ 451.984304] FAT-fs (loop2): Directory bread(block 137) failed [ 452.019378] attempt to access beyond end of device [ 452.024501] loop2: rw=2049, want=311, limit=128 03:33:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x19000000) 03:33:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xed, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x20000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3c], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:20 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/149, &(0x7f0000000080)=0x95) 03:33:20 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008911, &(0x7f0000000100)="2957e1311f16f477671070") r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb01001001ffa40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 03:33:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x7}]) 03:33:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x33], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:20 executing program 3: unshare(0x1040000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) socket$inet_tcp(0x2, 0x1, 0x0) 03:33:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x19e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 452.154093] FAT-fs (loop0): Directory bread(block 2563) failed [ 452.167127] FAT-fs (loop0): Directory bread(block 2564) failed [ 452.185669] FAT-fs (loop0): Directory bread(block 2565) failed [ 452.220705] FAT-fs (loop0): Directory bread(block 2566) failed [ 452.227908] FAT-fs (loop2): Directory bread(block 128) failed [ 452.245782] FAT-fs (loop0): Directory bread(block 2567) failed [ 452.274232] FAT-fs (loop2): Directory bread(block 129) failed [ 452.290121] FAT-fs (loop0): Directory bread(block 2568) failed [ 452.296560] FAT-fs (loop2): Directory bread(block 130) failed [ 452.317168] FAT-fs (loop2): Directory bread(block 131) failed 03:33:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff84], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xae, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 452.322696] FAT-fs (loop0): Directory bread(block 2569) failed [ 452.324147] FAT-fs (loop2): Directory bread(block 132) failed [ 452.349302] FAT-fs (loop0): Directory bread(block 2570) failed [ 452.362273] FAT-fs (loop0): Directory bread(block 2571) failed [ 452.376917] FAT-fs (loop2): Directory bread(block 133) failed [ 452.387615] FAT-fs (loop0): Directory bread(block 2572) failed [ 452.408735] FAT-fs (loop2): Directory bread(block 134) failed 03:33:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x2], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x3, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 452.427466] FAT-fs (loop2): Directory bread(block 135) failed [ 452.434294] FAT-fs (loop2): Directory bread(block 136) failed [ 452.451530] FAT-fs (loop2): Directory bread(block 137) failed [ 452.515384] attempt to access beyond end of device [ 452.520454] loop2: rw=2049, want=311, limit=128 03:33:21 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x4}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:21 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={r1, 0xe2, "701b098fffc9f7bb0ed54a263337c82019f322e13ebd3dc88ba1dc5a35bfa71dd52648bd58cab44d2c0ace5db90910a42a58f9adbf8ca131c1a76c4dee0fce8f0b75685fa83dfa299ada4580b24653f5c72b54750dd36168b317cc8f9775995d21ed4c496493410d930c5fb399df4e2ea2342eb09cf23a80b80d15aa2489a67739e825dd2f6d78597636371f071305937e88d8cd47a9d09ad858626952bdf9454b241595e1b4ee206093f41a04bbb675e748c81e791b5c0b3222cc49a4be21216400f28eb75ea04d98c3372582bc8023becc10e7bded2cd56e6860a08d7a03575926"}, &(0x7f0000000140)=0xea) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:33:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x10) 03:33:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x3}]) 03:33:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x13c, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xfffffffffffff000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 452.769721] FAT-fs (loop0): Directory bread(block 2563) failed 03:33:21 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x800000000004) request_key(&(0x7f00007c5000)='logon\x00', &(0x7f0000a08000)={0x73, 0x79, 0x7a}, &(0x7f0000d77ff9)='\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x143040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r1, 0xff, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x100, {"f6a9be5600988e816979f23b34b76d2b"}, 0x828, 0x9, 0x2}, @in={0x2, 0x4e21, @multicast1=0xe0000001}}}, 0x118) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000000)) 03:33:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2a8, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 452.839212] FAT-fs (loop0): Directory bread(block 2564) failed [ 452.853778] FAT-fs (loop2): Directory bread(block 128) failed 03:33:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x33000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x15c, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 452.885854] FAT-fs (loop2): Directory bread(block 129) failed [ 452.892111] FAT-fs (loop0): Directory bread(block 2565) failed [ 452.896461] FAT-fs (loop2): Directory bread(block 130) failed [ 452.904502] FAT-fs (loop2): Directory bread(block 131) failed [ 452.910711] FAT-fs (loop2): Directory bread(block 132) failed [ 452.926706] FAT-fs (loop0): Directory bread(block 2566) failed [ 452.939745] FAT-fs (loop2): Directory bread(block 133) failed [ 452.961215] FAT-fs (loop0): Directory bread(block 2567) failed 03:33:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x200000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 452.986503] FAT-fs (loop2): Directory bread(block 134) failed [ 452.988497] FAT-fs (loop0): Directory bread(block 2568) failed [ 453.019994] FAT-fs (loop2): Directory bread(block 135) failed [ 453.026855] FAT-fs (loop0): Directory bread(block 2569) failed 03:33:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x116, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xf000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 453.038240] FAT-fs (loop2): Directory bread(block 136) failed 03:33:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0x4400) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000240)) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f0000000040)=""/177) write(r1, &(0x7f0000000200)="aabcd7fa10e1", 0x6) [ 453.074564] FAT-fs (loop0): Directory bread(block 2570) failed [ 453.080946] FAT-fs (loop2): Directory bread(block 137) failed [ 453.096719] FAT-fs (loop0): Directory bread(block 2571) failed 03:33:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x800e], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 453.135110] FAT-fs (loop0): Directory bread(block 2572) failed [ 453.151242] attempt to access beyond end of device [ 453.156378] loop2: rw=2049, want=311, limit=128 03:33:21 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xffffffc0}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x15d, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x400000000000000) 03:33:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xfffffff5], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x5}]) 03:33:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x201, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @empty, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0xb}, @empty, @loopback={0x0, 0x1}, 0x994a, 0x9, 0x8, 0x0, 0x8, 0x100000, r1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/4096, &(0x7f00000000c0)=0x1000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x23, &(0x7f0000000180), 0x4) close(r3) close(r2) 03:33:21 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="bd2a1d62420000"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x60a}], 0x1, 0x0) 03:33:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff8c], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 453.483463] IPVS: length: 4096 != 24 [ 453.494942] FAT-fs (loop0): Unrecognized mount option "½*bB" or missing value [ 453.519691] FAT-fs (loop2): Directory bread(block 128) failed 03:33:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x3d, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 453.550083] FAT-fs (loop0): Unrecognized mount option "½*bB" or missing value [ 453.556547] FAT-fs (loop2): Directory bread(block 129) failed 03:33:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x26050000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 453.603411] FAT-fs (loop2): Directory bread(block 130) failed [ 453.632383] FAT-fs (loop2): Directory bread(block 131) failed 03:33:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x5800000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 453.652198] FAT-fs (loop2): Directory bread(block 132) failed 03:33:21 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x200) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, {0x1, 0x2, 0xfffffffffffeffff, 0xa882, 0x8, 0x8}}, 0x8) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0x30000016}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:33:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x11c, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 453.688702] FAT-fs (loop2): Directory bread(block 133) failed [ 453.703646] FAT-fs (loop2): Directory bread(block 134) failed 03:33:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x4000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 453.752451] FAT-fs (loop2): Directory bread(block 135) failed [ 453.783855] FAT-fs (loop0): Directory bread(block 2563) failed 03:33:22 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffff0000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 453.809101] FAT-fs (loop0): Directory bread(block 2564) failed [ 453.838081] FAT-fs (loop2): Directory bread(block 136) failed [ 453.844366] FAT-fs (loop0): Directory bread(block 2565) failed [ 453.864168] FAT-fs (loop0): Directory bread(block 2566) failed [ 453.878817] FAT-fs (loop2): Directory bread(block 137) failed [ 453.888167] FAT-fs (loop0): Directory bread(block 2567) failed [ 453.895361] FAT-fs (loop0): Directory bread(block 2568) failed [ 453.914286] attempt to access beyond end of device [ 453.919314] loop2: rw=2049, want=311, limit=128 [ 453.935885] FAT-fs (loop0): Directory bread(block 2569) failed [ 453.980165] FAT-fs (loop0): Directory bread(block 2570) failed [ 453.990519] FAT-fs (loop0): Directory bread(block 2571) failed [ 453.996694] FAT-fs (loop0): Directory bread(block 2572) failed 03:33:22 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x5000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x87, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:22 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3300], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x600000000000000) 03:33:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x8}]) [ 454.199106] FAT-fs (loop2): Directory bread(block 128) failed [ 454.229896] FAT-fs (loop2): Directory bread(block 129) failed [ 454.245071] FAT-fs (loop2): Directory bread(block 130) failed [ 454.251796] FAT-fs (loop2): Directory bread(block 131) failed [ 454.264361] FAT-fs (loop2): Directory bread(block 132) failed [ 454.273272] FAT-fs (loop2): Directory bread(block 133) failed [ 454.279781] FAT-fs (loop2): Directory bread(block 134) failed [ 454.293508] FAT-fs (loop2): Directory bread(block 135) failed [ 454.304764] FAT-fs (loop2): Directory bread(block 136) failed [ 454.311588] FAT-fs (loop2): Directory bread(block 137) failed [ 454.339534] attempt to access beyond end of device [ 454.344677] loop2: rw=2049, want=311, limit=128 [ 454.362075] IPVS: length: 4096 != 24 03:33:22 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000840), 0x0) sendmsg(r2, &(0x7f00000017c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000001580)=ANY=[]}, 0x480c0) r3 = accept4(r2, 0x0, &(0x7f0000001800), 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) io_setup(0xffffffffffffffff, &(0x7f0000000000)=0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0xa8240, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x6, 0x602000) io_submit(r4, 0x2, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f00000001c0)="ae4293275f66d785642f6cf363d80a7538f360cafdc4294b6f754b6e2b2d7d4b25ba730f7c946d2db0ec100e5a7d2bcfde42bdb09f6c63072373081fe55a8413f22859b5df9d37192ba40b2f276173ade64e41e30c58ba71045f83751451ef50e1a04732c9ef51", 0x67, 0xb80, 0x0, 0x0, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f0000000280)="323e52fc2ad020784e5ff9b43ad5e62e16f3cc9e1b9495d9af38a0c26ed1e8f3061c8cf3abafe6ac557879adb3fce1fd9955130271ee6ad2340f42472e93778414517f3f7f3595be568ad64abd48e4b54eeb3fa3edd4c5e41a097ab5ebdbbd1031306a3d2f8fbbdedbb37b73563ee5ea8e9aa97c7272e50a0c8304e5c497a4d1cd98134863d9391d7f9f21942492c449583fd9f2a81a32caab4e892bf93b0b691fde1672d0848a4e3e85", 0xaa, 0x100, 0x0, 0x1, r6}]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 03:33:22 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='gid=3,h']) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:33:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xa802, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1ee, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:22 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x58], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x15000000) 03:33:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1300}]) 03:33:22 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x800e000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) [ 454.584411] FAT-fs (loop0): Unrecognized mount option "h" or missing value 03:33:22 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x89ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xffffff9e, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xe, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 454.625074] FAT-fs (loop2): Directory bread(block 128) failed [ 454.641068] FAT-fs (loop0): Unrecognized mount option "h" or missing value [ 454.649150] FAT-fs (loop2): Directory bread(block 129) failed [ 454.667325] FAT-fs (loop2): Directory bread(block 130) failed [ 454.734546] FAT-fs (loop2): Directory bread(block 131) failed 03:33:23 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x0) 03:33:23 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) r0 = dup(0xffffffffffffffff) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/4096) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) readahead(r2, 0x81, 0x3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c001f00", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf250100000008000500ff010000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = syz_open_procfs(r1, &(0x7f0000000140)='timers\x00') getdents64(r4, &(0x7f0000000080)=""/36, 0x24) syz_open_dev$sndmidi(&(0x7f0000001200)='/dev/snd/midiC#D#\x00', 0x4, 0x200001) 03:33:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x391, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x100000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 454.777191] FAT-fs (loop2): Directory bread(block 132) failed [ 454.802738] FAT-fs (loop2): Directory bread(block 133) failed 03:33:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x14c, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 454.830090] FAT-fs (loop2): Directory bread(block 134) failed [ 454.849129] FAT-fs (loop2): Directory bread(block 135) failed [ 454.851071] FAT-fs (loop0): Directory bread(block 2563) failed 03:33:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x89060000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget(0x1, 0x3000, 0xc00, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/100) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) sendfile(r0, r1, &(0x7f0000000880), 0x800009) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000240)) [ 454.900187] FAT-fs (loop2): Directory bread(block 136) failed [ 454.918865] FAT-fs (loop0): Directory bread(block 2564) failed [ 454.968460] FAT-fs (loop2): Directory bread(block 137) failed [ 454.975140] FAT-fs (loop0): Directory bread(block 2565) failed 03:33:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x6) 03:33:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xd7, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x4], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 455.018158] FAT-fs (loop0): Directory bread(block 2566) failed [ 455.041400] FAT-fs (loop0): Directory bread(block 2567) failed [ 455.051960] attempt to access beyond end of device [ 455.057052] loop2: rw=2049, want=311, limit=128 [ 455.080315] FAT-fs (loop0): Directory bread(block 2568) failed [ 455.120299] FAT-fs (loop0): Directory bread(block 2569) failed 03:33:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xa3, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 455.131854] attempt to access beyond end of device [ 455.136916] loop2: rw=2049, want=310, limit=128 [ 455.141639] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 455.150810] FAT-fs (loop0): Directory bread(block 2570) failed [ 455.157443] FAT-fs (loop0): Directory bread(block 2571) failed [ 455.163677] FAT-fs (loop0): Directory bread(block 2572) failed [ 455.177401] attempt to access beyond end of device [ 455.182541] loop2: rw=2049, want=311, limit=128 [ 455.187249] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 455.220669] attempt to access beyond end of device [ 455.225768] loop2: rw=2049, want=312, limit=128 [ 455.250449] attempt to access beyond end of device [ 455.255522] loop2: rw=2049, want=313, limit=128 [ 455.269814] attempt to access beyond end of device [ 455.274874] loop2: rw=2049, want=326, limit=128 [ 455.280469] attempt to access beyond end of device [ 455.285606] loop2: rw=2049, want=327, limit=128 [ 455.290846] attempt to access beyond end of device [ 455.295909] loop2: rw=2049, want=328, limit=128 03:33:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x2}]) [ 455.314584] attempt to access beyond end of device [ 455.319697] loop2: rw=2049, want=329, limit=128 [ 455.332243] attempt to access beyond end of device [ 455.337323] loop2: rw=2049, want=331, limit=128 03:33:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000100008000ab3c49c213a20a000000000000000007"]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0xc0010140]}) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7, 0x40000) getresgid(&(0x7f0000000080), &(0x7f0000000280), &(0x7f00000002c0)=0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x3, &(0x7f0000000440)=[r4, r5, r6]) 03:33:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x2800], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:23 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x80ffffff}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x153, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xa802000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:23 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6769643d332c49891458c21bfdd7f99c5f310845ab9fa5b94b7d5756"]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)) r2 = getegid() lchown(&(0x7f0000000140)='./file0\x00', r1, r2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000280)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x3f, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x4) 03:33:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8906], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1b5, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 455.548059] FAT-fs (loop0): Unrecognized mount option "I‰XÂý×ùœ_1E«Ÿ¥¹K}WV" or missing value [ 455.558991] FAT-fs (loop2): Directory bread(block 128) failed 03:33:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x9e00000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 455.599211] FAT-fs (loop2): Directory bread(block 129) failed [ 455.628643] FAT-fs (loop0): Unrecognized mount option "I‰XÂý×ùœ_1E«Ÿ¥¹K}WV" or missing value [ 455.643167] FAT-fs (loop2): Directory bread(block 130) failed 03:33:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={{0x800, 0xa1a0000000, 0x9, 0x401, 0xece, 0x100000000}, 0xbe6}) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x1f6c000, 0x7f3a, 0x66}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 03:33:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffa888], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 455.695248] FAT-fs (loop2): Directory bread(block 131) failed [ 455.732399] FAT-fs (loop2): Directory bread(block 132) failed [ 455.776695] FAT-fs (loop2): Directory bread(block 133) failed [ 455.798501] FAT-fs (loop2): Directory bread(block 134) failed [ 455.813350] FAT-fs (loop2): Directory bread(block 135) failed 03:33:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c) 03:33:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xbb, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x4000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:24 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0xaaaaaaaaaaaaac9, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 455.848338] FAT-fs (loop2): Directory bread(block 136) failed [ 455.872660] FAT-fs (loop2): Directory bread(block 137) failed [ 455.920699] attempt to access beyond end of device [ 455.925720] loop2: rw=2049, want=311, limit=128 03:33:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8100000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:24 executing program 3: r0 = socket(0x9, 0x3, 0x5) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000100)=0x83, 0x4) sendto$unix(r0, &(0x7f00000001c0)="8bcb1d585d8f28b13a8e3a05c02b9b734c91ac19d4e5739ea47229d11d7d66bf8482aff8147e3b020000045f", 0x2c, 0x0, &(0x7f0000000d00)=@abs, 0x2d2) 03:33:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x4}]) [ 455.988788] FAT-fs (loop0): bogus number of reserved sectors [ 455.994690] FAT-fs (loop0): Can't find a valid FAT filesystem [ 456.153525] FAT-fs (loop2): Directory bread(block 128) failed [ 456.165255] FAT-fs (loop2): Directory bread(block 129) failed [ 456.177972] FAT-fs (loop2): Directory bread(block 130) failed [ 456.189767] FAT-fs (loop2): Directory bread(block 131) failed 03:33:24 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xff00}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1a8, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xf0ffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8001000000002b) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="330002e0000000002c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000002c7d04c74ba93bfcdffa5c37c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025b92aaacda8ffab00000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6"], 0x56a) r2 = dup2(r1, r1) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) 03:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xa1000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 456.202626] FAT-fs (loop2): Directory bread(block 132) failed [ 456.215220] FAT-fs (loop2): Directory bread(block 133) failed [ 456.241985] FAT-fs (loop2): Directory bread(block 134) failed 03:33:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x22, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 456.257127] FAT-fs (loop2): Directory bread(block 135) failed [ 456.278127] FAT-fs (loop2): Directory bread(block 136) failed 03:33:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0/file0\x00', 0x7a00000000000002, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000204000000000200000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x3, &(0x7f0000000240)=ANY=[]) 03:33:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffdd86], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 456.315774] FAT-fs (loop2): Directory bread(block 137) failed 03:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x90030000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 456.378432] attempt to access beyond end of device [ 456.383875] loop2: rw=2049, want=311, limit=128 03:33:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1200000000000000) 03:33:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x600000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:25 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x58f, 0x101080) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x30800, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) pipe2(&(0x7f0000000100), 0x80800) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:33:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x17e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x8800000}]) 03:33:25 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500002400000000002f90450a0000bea29500d20434"], &(0x7f0000000280)={0x0, 0x0, [0x0, 0x8000000000]}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x46a, 0x20000) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) 03:33:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xd502, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:25 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x46000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x1a3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x4000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x11, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 456.822443] FAT-fs (loop0): bogus number of reserved sectors [ 456.828390] FAT-fs (loop0): Can't find a valid FAT filesystem [ 456.861639] FAT-fs (loop2): Directory bread(block 128) failed 03:33:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x80) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x230, 0x6, 0xc, 0x4, "62566fc48725382bbb24b4aced8cb34c16aacd7c5e173eff872f08d0260c372b71407aa481f910dedf644a48fda4cb808e814aef00", "93e73fb07b6eaf9bdcb6338c7f42b66a36109e424fa2cf0d90a8fd4f35ffc300", [0x20]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/57, 0x39) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000240)) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f00000000c0)={0x3e71, 0xce2}) statfs(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/210) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x61, &(0x7f0000000140)={0x0, 'lo\x00'}, 0x18) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x10d, 0xa, &(0x7f0000000240)={0x7}, 0xc) close(r3) close(r1) [ 456.890518] FAT-fs (loop2): Directory bread(block 129) failed [ 456.927344] FAT-fs (loop0): bogus number of reserved sectors [ 456.933406] FAT-fs (loop0): Can't find a valid FAT filesystem [ 456.936447] FAT-fs (loop2): Directory bread(block 130) failed 03:33:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xa1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:25 executing program 3: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000011c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x48) preadv(r1, &(0x7f0000000240), 0x37d, 0x0) [ 456.993196] FAT-fs (loop2): Directory bread(block 131) failed [ 457.031678] FAT-fs (loop2): Directory bread(block 132) failed 03:33:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x16d, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 457.088175] FAT-fs (loop2): Directory bread(block 133) failed [ 457.119555] FAT-fs (loop2): Directory bread(block 134) failed [ 457.134768] FAT-fs (loop2): Directory bread(block 135) failed [ 457.154150] FAT-fs (loop2): Directory bread(block 136) failed [ 457.172165] FAT-fs (loop2): Directory bread(block 137) failed [ 457.220494] attempt to access beyond end of device [ 457.225569] loop2: rw=2049, want=311, limit=128 [ 457.378373] attempt to access beyond end of device [ 457.383492] loop2: rw=2049, want=310, limit=128 [ 457.388226] buffer_io_error: 6 callbacks suppressed [ 457.388241] Buffer I/O error on dev loop2, logical block 309, lost async page write [ 457.401234] attempt to access beyond end of device [ 457.406287] loop2: rw=2049, want=311, limit=128 [ 457.411041] Buffer I/O error on dev loop2, logical block 310, lost async page write [ 457.418943] attempt to access beyond end of device [ 457.423927] loop2: rw=2049, want=312, limit=128 [ 457.428612] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 457.436753] attempt to access beyond end of device [ 457.441937] loop2: rw=2049, want=313, limit=128 [ 457.446640] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 457.455241] attempt to access beyond end of device [ 457.460350] loop2: rw=2049, want=326, limit=128 [ 457.465071] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 457.473615] attempt to access beyond end of device 03:33:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x13000000) 03:33:25 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:33:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x43050000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x187, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 457.478710] loop2: rw=2049, want=327, limit=128 [ 457.483425] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 457.491932] attempt to access beyond end of device [ 457.496967] loop2: rw=2049, want=328, limit=128 [ 457.501660] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 457.512991] attempt to access beyond end of device [ 457.517989] loop2: rw=2049, want=329, limit=128 [ 457.522719] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 457.533331] attempt to access beyond end of device [ 457.538400] loop2: rw=2049, want=2153, limit=128 [ 457.554216] FAT-fs (loop0): Directory bread(block 2563) failed [ 457.560488] FAT-fs (loop0): Directory bread(block 2564) failed [ 457.593106] FAT-fs (loop0): Directory bread(block 2565) failed [ 457.607736] FAT-fs (loop0): Directory bread(block 2566) failed [ 457.613859] FAT-fs (loop0): Directory bread(block 2567) failed [ 457.620224] FAT-fs (loop0): Directory bread(block 2568) failed [ 457.626532] FAT-fs (loop0): Directory bread(block 2569) failed [ 457.633112] FAT-fs (loop0): Directory bread(block 2570) failed 03:33:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x800800000000}]) 03:33:25 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x89040000}) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x78, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0xfffffffffffffe00, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e21, 0xfffffffffffffffa, @loopback={0x0, 0x1}, 0x14}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @rand_addr=0xbc6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0xe59d, 0x4, 0x0, 0x0, 0xbe0f, 0x12000000, 0x9, 0x8000, r2}, &(0x7f00000002c0)=0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f00000000c0)={0x0, 0x20}) 03:33:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2d5, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:25 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x3200}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x180, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x5800], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xb802000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 457.650917] FAT-fs (loop0): Directory bread(block 2571) failed [ 457.671336] FAT-fs (loop0): Directory bread(block 2572) failed 03:33:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x93ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1dd, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:26 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x402000, 0x2) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000100)={0x7}) sendmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x1000000000000052, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b02df2fd0846bc0964f4ffde3d917e30f"}], 0x28}}], 0x1, 0x0) r3 = dup2(r0, r0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000080)) 03:33:26 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x34, &(0x7f0000000080)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x33]}, 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') fstatfs(r0, &(0x7f0000000000)=""/26) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:33:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2605, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 457.940474] FAT-fs (loop2): Directory bread(block 128) failed [ 457.983081] FAT-fs (loop2): Directory bread(block 129) failed [ 458.006505] FAT-fs (loop2): Directory bread(block 130) failed [ 458.026287] FAT-fs (loop2): Directory bread(block 131) failed [ 458.040941] FAT-fs (loop2): Directory bread(block 132) failed [ 458.047228] FAT-fs (loop2): Directory bread(block 133) failed [ 458.053815] FAT-fs (loop2): Directory bread(block 134) failed [ 458.061583] FAT-fs (loop2): Directory bread(block 135) failed [ 458.072890] FAT-fs (loop2): Directory bread(block 136) failed [ 458.081244] FAT-fs (loop2): Directory bread(block 137) failed [ 458.109810] attempt to access beyond end of device [ 458.114879] loop2: rw=2049, want=311, limit=128 03:33:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1900000000000000) 03:33:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x85ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xf9, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:26 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x2, &(0x7f00000002c0)=ANY=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='mounts\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x222, 0x0) 03:33:26 executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@jdev={'jdev', 0x3e, './file0'}, 0x2c}]}) 03:33:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xffff0000}]) 03:33:26 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xfffffff5}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x14a, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8dffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 458.325349] FAT-fs (loop0): Directory bread(block 2563) failed [ 458.331569] REISERFS warning (device loop3): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 458.331569] [ 458.351702] FAT-fs (loop2): Directory bread(block 128) failed [ 458.373703] FAT-fs (loop0): Directory bread(block 2564) failed 03:33:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1da, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x1000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 458.399678] FAT-fs (loop0): Directory bread(block 2565) failed [ 458.403744] FAT-fs (loop2): Directory bread(block 129) failed [ 458.428417] FAT-fs (loop0): Directory bread(block 2566) failed 03:33:26 executing program 3: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000, 0x180) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x408, 0x0) dup2(r0, r2) [ 458.464811] FAT-fs (loop0): Directory bread(block 2567) failed [ 458.466711] FAT-fs (loop2): Directory bread(block 130) failed [ 458.498459] FAT-fs (loop0): Directory bread(block 2568) failed 03:33:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff85], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 458.515201] FAT-fs (loop2): Directory bread(block 131) failed [ 458.539704] FAT-fs (loop0): Directory bread(block 2569) failed 03:33:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x6801000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x5, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 458.561981] FAT-fs (loop2): Directory bread(block 132) failed [ 458.569144] FAT-fs (loop0): Directory bread(block 2570) failed [ 458.584609] FAT-fs (loop0): Directory bread(block 2571) failed 03:33:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffca88], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 458.617139] FAT-fs (loop0): Directory bread(block 2572) failed [ 458.635688] FAT-fs (loop2): Directory bread(block 133) failed [ 458.646710] FAT-fs (loop2): Directory bread(block 134) failed 03:33:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x240, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1ce, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 458.676420] FAT-fs (loop2): Directory bread(block 135) failed [ 458.707552] FAT-fs (loop2): Directory bread(block 136) failed 03:33:27 executing program 0: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x1ff, 0xeb, 0x3) syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x900000, &(0x7f00000002c0)=ANY=[@ANYRES64]) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@can, &(0x7f0000000400)=0x80, 0x80000) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000440)=0x200000, 0x4) r3 = syz_open_procfs(r1, &(0x7f00000001c0)='mounts\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000480)) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0xbf, @multicast1=0xe0000001, 0x4e23, 0x1, 'fo\x00', 0xf, 0x8, 0x15}, 0x2c) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080)=0xc8cb, 0x10000, 0x5) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f00000003c0)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000000c0)={@host=0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000100)={0x200, 0xffffffff, 0x783f4561}) 03:33:27 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x86ddffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xb6, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 458.741541] FAT-fs (loop2): Directory bread(block 137) failed [ 458.810277] attempt to access beyond end of device [ 458.815351] loop2: rw=2049, want=311, limit=128 03:33:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xf4ffffff}]) [ 458.991872] FAT-fs (loop2): Directory bread(block 128) failed [ 459.017129] FAT-fs (loop2): Directory bread(block 129) failed [ 459.026715] FAT-fs (loop2): Directory bread(block 130) failed [ 459.042818] FAT-fs (loop2): Directory bread(block 131) failed [ 459.056750] FAT-fs (loop2): Directory bread(block 132) failed [ 459.070605] FAT-fs (loop2): Directory bread(block 133) failed [ 459.084570] FAT-fs (loop2): Directory bread(block 134) failed 03:33:27 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x1100000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:27 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="800000000002000019000000e60100006c000000002800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, &(0x7f0000000080)) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}}}, &(0x7f0000000100)=0xb0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 03:33:27 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x2000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x166, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2000000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 459.091448] FAT-fs (loop2): Directory bread(block 135) failed [ 459.105847] FAT-fs (loop2): Directory bread(block 136) failed [ 459.133321] FAT-fs (loop2): Directory bread(block 137) failed [ 459.139636] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 459.199679] attempt to access beyond end of device [ 459.204800] loop2: rw=2049, want=311, limit=128 [ 459.210765] EXT4-fs (loop0): bad geometry: block count 512 exceeds size of device (1 blocks) 03:33:27 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_read_part_table(0x93ac, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="c9", 0x1}]) 03:33:27 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x89ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x174, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x700, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x8800000}]) 03:33:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="76e89c5696"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000040)={0x3, 0x1000000000000, 0x1, 0x7f, 0x1ff}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:27 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x100000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xf, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:27 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8864], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 459.602230] FAT-fs (loop2): Directory bread(block 128) failed 03:33:27 executing program 3: gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fcntl$setstatus(r0, 0x4, 0x42400) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0xf35, 0x876d, 0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000100)=0x78) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'ifb0\x00'}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)={0x1, {{0x2, 0x4e20, @rand_addr=0x2}}, 0x1, 0x1, [{{0x2, 0x4e24, @rand_addr=0x8}}]}, 0x110) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x40000, @broadcast=0xffffffff}, 0x10) [ 459.650505] FAT-fs (loop2): Directory bread(block 129) failed [ 459.694150] FAT-fs (loop2): Directory bread(block 130) failed [ 459.724608] FAT-fs (loop2): Directory bread(block 131) failed 03:33:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xff00], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 459.758171] FAT-fs (loop2): Directory bread(block 132) failed [ 459.790966] FAT-fs (loop2): Directory bread(block 133) failed [ 459.817334] FAT-fs (loop2): Directory bread(block 134) failed [ 459.840892] FAT-fs (loop2): Directory bread(block 135) failed [ 459.851660] FAT-fs (loop2): Directory bread(block 136) failed [ 459.857785] FAT-fs (loop2): Directory bread(block 137) failed [ 459.877687] attempt to access beyond end of device [ 459.882743] loop2: rw=2049, want=311, limit=128 03:33:28 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x1000, 0x2000}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x1149002, &(0x7f0000000540)=ANY=[]) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000), 0x102b402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001300)={0x2, &(0x7f0000000140)=[{0x100, 0x2, 0x8, 0x6}, {0x4, 0x2}]}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) sendto$packet(r3, &(0x7f0000000200)="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", 0x1000, 0x4041, &(0x7f0000000100)={0x11, 0x1d, r4, 0x1, 0x7ff, 0x6}, 0x14) dup2(r1, r2) 03:33:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x400000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc4, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x400000) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, {0x8, 0x101, 0x2, 0x0, 0x3733, 0x2ea}}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0f4ff73d7"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = msgget$private(0x0, 0x400) msgsnd(r5, &(0x7f0000000580)={0x3, "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"}, 0x1008, 0x0) openat$cgroup_type(r1, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) 03:33:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xe80], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xffffffffffffffff}]) 03:33:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x4788], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1cf, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 460.042942] FAT-fs (loop2): Directory bread(block 128) failed [ 460.058166] FAT-fs (loop2): Directory bread(block 129) failed [ 460.076280] FAT-fs (loop2): Directory bread(block 130) failed 03:33:28 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xe8030000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 460.131336] FAT-fs (loop2): Directory bread(block 131) failed [ 460.140187] FAT-fs (loop2): Directory bread(block 132) failed [ 460.155658] FAT-fs (loop2): Directory bread(block 133) failed [ 460.163779] FAT-fs (loop2): Directory bread(block 134) failed [ 460.172672] FAT-fs (loop2): Directory bread(block 135) failed 03:33:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:28 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0xffffffffffff8000) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="6000000096"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0xa, 0x6, 0x1e, 0x2, 'syz0\x00', 0x6d}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x16, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 460.217247] FAT-fs (loop2): Directory bread(block 136) failed [ 460.249163] FAT-fs (loop2): Directory bread(block 137) failed 03:33:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8bffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 460.324306] attempt to access beyond end of device [ 460.329354] loop2: rw=2049, want=311, limit=128 03:33:28 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f00000026c0)=[{&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c95d9d47e4635c995b18ba766a818648cd01f2e3825bee3eb373769cb2c85d7f0bb3aff58d31b0352895601ee239883abfad45a0e8c0f59bf3b52edf3500bb"}, 0x60, &(0x7f0000002600), 0x5f}], 0x4924924924926b2, 0x0) close(r0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffff, 0x10000) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)=0x2) 03:33:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x10400) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002640)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x1002}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8943, &(0x7f0000000180)={'bcsh0\x00'}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 03:33:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1e1, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x6000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xfbffffff00000000}]) 03:33:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) msgget$private(0x0, 0x601) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="7f"], 0x1) write(r1, &(0x7f00000001c0), 0xfd1d) 03:33:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:29 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xf5ffffff}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0xfffffffffffffffc, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r3}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x68000010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x2d4, 0x3d, 0x400, 0x70bd27, 0x25dfdbfe, {0x14}, [@typed={0x8, 0x85, @str='\x00'}, @nested={0x2b8, 0x8d, [@generic="08d8d462c80d9451c9cfe9fe72bfe561e884aeb534085bd6ba6ce5a58fe47cd9f3e3315c99f7cd49e4445fb0685bbde1d3589fb7ae58b33609dda0b56b17e4767a5a87bea548a8e57981b252157cedba85d98884767c87695bd2301012666fe86dbe5ee0a5a3f9743670a4b1ec1f9cb56dc0d15a101390f15d", @generic="60b828999fecf1d6b68ce875f5101382b2b973deef67aed33fd4ec4af965eefa99034e195e0e4e86320d9a7a0312fb7a16cc59860946b7bd3ac28ae1ecf1cb84711bc7bbf2340f7d8bfa794903a68be11316f7fc9d195ba13ba407b8c80412e7839ee7085c2c001c67f049450c4dedc9a1149bcc56239db33f182a22dd1c15db4f54654cf8efc95dea5dd1b78c69a5b9419572305742bea0234ff2a22c29b5609aabbbea9fe194f9f88384124382375e3b87cc88e67b49586a857504a0852dae9966607f561c0d063af7", @generic="a0232365", @typed={0x8, 0x7d, @str='\x00'}, @typed={0x8, 0xe, @uid=r5}, @generic="826b61beaf424756f8d0b2f25612bbea8fe1beb47574e105e4ab7d1c0534e318d9893d01cd8d659241e427a2655bfa6304b4394f185060ae0a36aa1faf43c2b9dcb2cf3949507c627f9845595c031a18f68f9010a050bffa9184460a4cdffad49914c57d7e2c3831a496e0d018a435c608c5fc605cf24adf77d05caf5f89071642b8110ba597fe806f04adb2d1a409ff9ddc35285317081146d8a54f9dca083373d2d7e98f2fd72cb7b6494101dd734ea8721b681f50437a4c46c8bad4ace7f4f13c3a76529260119da252f0de51a632adec633e034788d8c15ec382ee4779273a57f5b50798305df7205489e9beef2af0f917", @generic="310468669151674c402c037fa79990d71cc8a5358be467", @generic="25de04598bf8278bb6a9390db038e6148a468f1667ab7ebfa5991694017cae3d9f972e86aab206e74494faa39020e0d4eb892bb6d781ac32de1a49118e98b18017bd577232bd87ec06308464f51271dae9"]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20008000}, 0x881) 03:33:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xf5ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x9effffff00000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1a7, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 461.097642] FAT-fs (loop2): Directory bread(block 128) failed [ 461.128310] FAT-fs (loop2): Directory bread(block 129) failed [ 461.135672] FAT-fs (loop2): Directory bread(block 130) failed 03:33:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000700)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00000000000004000500"], 0x18}, 0x1}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 461.143272] FAT-fs (loop2): Directory bread(block 131) failed [ 461.149529] FAT-fs (loop2): Directory bread(block 132) failed [ 461.162654] FAT-fs (loop2): Directory bread(block 133) failed [ 461.180260] FAT-fs (loop2): Directory bread(block 134) failed 03:33:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff8b], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 461.219276] FAT-fs (loop2): Directory bread(block 135) failed [ 461.245088] FAT-fs (loop2): Directory bread(block 136) failed 03:33:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2f030000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:29 executing program 0: r0 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="703bedb799f8537c1a2d30aef03f1d7c296eb7bbbf3458b13c6e50b53d934b230cb9fe3ce062bb4bded30cf72ff6006bd198d28717be91d6c37d438371643f1713b4d4074971406e8afd6e96a87787b6371d7987801b7d0d1d9775583de45831b0807697e2206c334350aa0cd3d2418e9d1ee1761334ee6d13760052220d5b8763d5efe20a3e49fb0830d0481a353a43baed253cfc59ab5907946a789112dd83e8798f494003feb73cd2198a9709cbe9bb9e19698dffd7e0af1d22ae78c7d09aa87329395d6f5ea9dcda56b50883e015950bdb4bd2489135ed2b0850df86f1c419", 0xe1, 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='\x00', r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20000, 0x20) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000280)={0x4, [0x55a, 0x5, 0x80000000, 0x4]}, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000300)=0x8, 0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000540)={0x1, 0xbf7, &(0x7f00000003c0)="42fb59653583b08f798b1cdfdff35510c9954e3066fbb3f43ccf00f7280fb0716eb1664ba81a5f1aad25accc1baece9a36de8056e10d78eeff233cd74dcd9e51d15c38c570e6d9eae9c0d2df640d0cdbeb0a25f0f142b02a51cf79c459929f7981c34f25d9e8812719943c5b2305190c8e5ca7132d280529daa6470756f3116c429d8f98c6e3d4ebbbecd2631935317011cb8eb61ad7215cec70557d9e2505f681026468578b4d529fd942b9d4410a864b08", &(0x7f0000000480)="8a2b2fbfa9b45e96676fff0d4b862030f6d9e65c8c363145f2636a41c32ad06ebd4a33449aff27592767bbf74922ea65b409a6168bba46d3fecfa9b1290573784081c518bf5fd037c65348e0580e03526c67e5df4a341525e7cde2bdc4c4102be809f5637a60841538a1813681048306ca5f4e300f6900afe8682d2d9bdc68210adc7211561b766209", 0xb2, 0x89}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000580)={'bcsf0\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) bind$bt_l2cap(r2, &(0x7f00000005c0)={0x1f, 0x7fff, {0x10000, 0x6, 0x6, 0x6, 0x4, 0x1ff}, 0x8, 0xfffffffffffffffb}, 0xe) open_by_handle_at(r4, &(0x7f0000000600)={0x59, 0x0, "53db2934a00a617f06abfad241fe31ec24852690b8d3e6ba70c058201c641d409d98d36048b16e27a065b036a65a3444bb4be61f8d6ec598b2c98e29e6fb7bcee82e713be8c8e99f89bdf5b0c60caa59df"}, 0x2) add_key(&(0x7f0000000680)='user\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000700)) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000740)) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000780)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r5 = accept4$inet(r2, &(0x7f0000000840)={0x0, 0x0, @local}, &(0x7f0000000880)=0x10, 0x800) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000900)) ioctl$int_out(r4, 0x5460, &(0x7f0000000940)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000980)=""/72, &(0x7f0000000a00)=0x48) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000a40)={'veth0_to_team\x00', 0x9}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000a80)=0x1c) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000ac0)={0x2, 0x4}) close(r7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xdc, r8, 0x6, 0x70bd2c, 0x25dfdbfb, {0x7}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2e}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x488c0}, 0x81) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000d00)={0x3, 0x506, 0x9}) setsockopt(r6, 0x4074, 0x6, &(0x7f0000000d40)="3204ced27121aefc8562d22a722fc83a1cbcc63106dfcc1d9e6f8d9c6c7a473c67299a03dc4a3e6f54f479bad516a7b86d39ef3752c0e07f84cbdc5b1b3d449ca4761e6627f0652fce4d4bdd646f38f5c26417662d2b5486d43d5a498504fa9cf8143208678bdc09e2ee829e702b03031e663494220627621a7fb6f01da12610", 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000dc0)={'veth0_to_bridge\x00', 0x0}) connect$packet(r2, &(0x7f0000000e00)={0x11, 0xff, r9, 0x1, 0x3ff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 03:33:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1d8, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 461.285361] FAT-fs (loop2): Directory bread(block 137) failed [ 461.329302] attempt to access beyond end of device [ 461.334377] loop2: rw=2049, want=311, limit=128 03:33:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000580)) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x3, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000140)=""/215) 03:33:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x200000, 0x1a, 0x0, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000140)={{0x7, 0x1, 0x120000000000000, 0x40, 'syz0\x00', 0xaa}, 0x4, 0x3, 0x1, r3, 0x5, 0x5, 'syz1\x00', &(0x7f0000000040)=[',%vboxnet1/self%\x00', '/dev/ion\x00', '/dev/ion\x00', '\x00', '@security\x00'], 0x2e, [], [0xffffffffffffff00, 0x8, 0x2, 0x3]}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x101000000, 0xa}) 03:33:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x100000000000000}]) 03:33:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1bd, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x84ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xa8020000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:29 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000017c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001840)={'vcan0\x00', r1}) connect$can_bcm(r0, &(0x7f0000000400)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="04000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="000000007b516734c694cffc2af0b772a2a34d"], 0x5}, 0x1}, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x2) 03:33:29 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x3e8}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001000)=[@in={0x2}, @in={0x2, 0x0, @dev={0xac, 0x14, 0xffffffffffffffff}}], 0x20) sigaltstack(&(0x7f0000001000/0x1000)=nil, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) 03:33:30 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8bffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x6100, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x4b, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback=0x7f000001, 0x0, 0x3c}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @broadcast}, &(0x7f0000000080)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@empty, r2}, 0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) [ 461.772324] FAT-fs (loop2): Directory bread(block 128) failed [ 461.829858] FAT-fs (loop2): Directory bread(block 129) failed 03:33:30 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x400000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:30 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x48a00, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0xb4, "068b51c99a6b79031ca2d28913523b49f13884c22afe466ea4f0e410cc089418fbcc91208e5347d17401ae5a46eea55a912530ecb72ba9bdaf01c7bc70787223f858ca1b72828c74ecd2f197d7e61612d2e5346b695fe0cc9c6898a621bea019f0222b7f22fa2c36f49825ec69661205c6a314eac0b4074d85916b68f2b598b3605e67e33e93d59ec2f7fe808012aa3040e96e3ce54fb1ae738b8bc61ccd1b7051385f5bb68936034d62f02d586c2e5762043ead"}, &(0x7f0000000440)=0xd8) openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x0) socket$l2tp(0x18, 0x1, 0x1) accept(0xffffffffffffff9c, &(0x7f00000017c0), &(0x7f0000001840)=0x80) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x7, 0x51b, 0x5, 0x2, 0x6, 0x1, 0x36, 0x40, 0x367, 0x6, 0x2, 0x38, 0x1, 0x2, 0x3, 0x7}, [{0x4, 0xfffffffffffffffc, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x9, 0x6}, {0x1, 0x9, 0x1ff, 0x7, 0x80000001, 0xffffffffffffffc5, 0x8001, 0x7}], "5a932d6e69dfe6467bef27e56686f348d5d252a4724fbf05a00f6e7956c3cafcf4d62387d333d5c2c3819439941bb890398bd82ff18ecdaf497c491d5ba8edebb37709623b81c498991515de77f4150e41166f882f15bdb5950c7d0525387e67b4cddd375648bd988edf27161b70d9795b03990038a6e383c699759aef0b593987c7491aff4b4cba2ef26d11acc3306b40b1c94d3e60e2273332f447f80aad08c715dcbae296a410866686b837386ec665b0f4f3dbe426a5fffca1bb0cd89dacfeb7ecbec11ada90993d86e8b04b8ace9af0a03e152c2dcf023c1ad1d526a3b677f0ddd7bc", [[], []]}, 0x395) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001880)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10, 0x80800) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000018c0)='memory.low\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001900)='/dev/audio#\x00', 0xb66f, 0x0) epoll_create1(0x80000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup2(r1, r2) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="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", 0x101, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="de86256b276dd8c7507e00cd4400"]) [ 461.877835] FAT-fs (loop2): Directory bread(block 130) failed [ 461.906513] FAT-fs (loop2): Directory bread(block 131) failed 03:33:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1cc, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYBLOB="8baba8cacf612c7b692625a5ee9cad17e83a3f69f198425287be259a03b162eafb191631e9901d6778b4435bb9c9003c0d52ec21c1fc772b1da31a9e00047013b1efc05d9a7d498ace9099acb965429f6e308f0221908187f3b1b01fe2c8fe5b7b5297458c18", @ANYBLOB="df326e06d615e5fb3875ab477dbe2b1834423b2ede054afffd8c33ec797b06b579147fbdb923db76b1fc00bba704141882979279c979eb3316fe5870037197dfcb86622d6ccaaef43e5a9751ae2b1c21ad54f6e6789119a4c032c4c734023470238119a9c043767d266fa4de476cb748732e957e24d596a0122d5651086edcfe9b0bd7149868e2046dc38352a6aa0ab1bbb79018e9e329f1a9f34bcc071948c1be180eb1ac19150b95ab45a6048a7f9371376b7d94ec4ae1f16eb33bc982d1825febdc504df263c76f67bea404f93cb7bc2e90a28283d5e9f447dd5efb73c9bd7eb5b84153f44f6458226e49fdbc", @ANYPTR64], @ANYRES64=r1, @ANYRES16=r0]], &(0x7f0000000140)=0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:30 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xff00000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 461.958107] FAT-fs (loop2): Directory bread(block 132) failed [ 461.975297] EXT4-fs (loop0): Unrecognized mount option "Þ†%k'mØÇP~" or missing value [ 461.983080] FAT-fs (loop2): Directory bread(block 133) failed [ 462.000200] FAT-fs (loop2): Directory bread(block 134) failed [ 462.050529] FAT-fs (loop2): Directory bread(block 135) failed [ 462.088217] FAT-fs (loop2): Directory bread(block 136) failed [ 462.106918] FAT-fs (loop2): Directory bread(block 137) failed [ 462.162553] attempt to access beyond end of device [ 462.167618] loop2: rw=2049, want=311, limit=128 03:33:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x8000000000000000}]) 03:33:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1d3, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:30 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xd00000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f00000007c0)) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) ioctl(r0, 0x4000008912, &(0x7f0000000400)="295ee1311f16f477671070") lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00') r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) acct(&(0x7f00000000c0)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x711e) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000c80400002003000000000000980100000000000058020000300400003004000030040000300400003004000006000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e0000001e000000100000000ff00000073797a6b616c6c65723000000000000076657468315f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800036000000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004453435000000000000000000000000000000000000000000000000000003700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d80000000000000000000000000000000000000000000000000040004c4f470000000000000000000000000000000000000000000000000000000431f4a2731b419c1b6ee0f541beffbd98ab74cc9b61913401adbc0035942fff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000000000002800434845434b53554d000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c80000000000000000000000000000000000000000000000000030005450524f5859000000000000000000000000000000000000000000000000efce000007000000e00000024e210000ac1414aae0000001ffffffffffffff0076657468315f746f5f6272696467650076657468315f746f5f626f6e64000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000005f0000480000000000000000000000000000e80010010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000008000000000000002800727066696c74657200000000000000000000000000000000000000000000030000000000000028004453435000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000a0c1c0a6de95977f4c13aeb6e9e5aa89ff17c86ee7de699d61d56cc853091eb1123da90cfcf244ed98cb0da6720689515394ff62159d6654b263b27328e7a926fceceede3aeced4923c06ceb676cab6048f3d174927f868281015381f07f193c5c5a46b9a025dca624781c66a0271993eb071454b3e1dd815be61443f3"], 0x528) 03:33:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x8, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 462.343709] FAT-fs (loop2): Directory bread(block 128) failed [ 462.355424] FAT-fs (loop2): Directory bread(block 129) failed [ 462.365255] FAT-fs (loop2): Directory bread(block 130) failed [ 462.378206] FAT-fs (loop2): Directory bread(block 131) failed [ 462.387143] FAT-fs (loop2): Directory bread(block 132) failed 03:33:30 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xffffff7f00000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:30 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x2800000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1ad, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 462.398935] FAT-fs (loop2): Directory bread(block 133) failed [ 462.405135] FAT-fs (loop2): Directory bread(block 134) failed [ 462.413711] FAT-fs (loop2): Directory bread(block 135) failed [ 462.420140] FAT-fs (loop2): Directory bread(block 136) failed [ 462.426212] FAT-fs (loop2): Directory bread(block 137) failed 03:33:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xd5020000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:30 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2000000000101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x2, 0x1, 0x20, 'queue0\x00', 0x8}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x401, 0x200000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 03:33:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1a0, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 462.482216] attempt to access beyond end of device [ 462.487266] loop2: rw=2049, want=311, limit=128 03:33:30 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x1000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 462.570731] QAT: Invalid ioctl 03:33:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xfbffffff}]) [ 462.592629] QAT: Invalid ioctl 03:33:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2f03, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="600000ff96260c20e49bd497277d313c64782aef164f0335fce771bac26d24e04eb112f0d206ffdc05ca29f6c7d4135cc586464bbe6bc096413c2b905d7a67e2539df09f891b4ae5b2caf627105aced51246217c64039ecedf33112f8920b256414a811fa734f2f70f884a2e243988ee0158f47eea0d4af6427af26323087c20f9f3c61b5ad4d020e450fe5c31acd99709385f5678f7b09c6a"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:33:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x98, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:31 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x42000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001280)={0x0}, &(0x7f00000012c0)=0xc) fstat(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0}, &(0x7f0000001480)=0xc) lstat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000001580)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000015c0)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000016c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) sendmsg$unix(r1, &(0x7f0000001840)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="dd43b4d21ddb418ea42dadb14745f42f8df19942aa225d1bf807c5f48097a1df32a871cec08368feba02e5c247ef3e8f109c14464bcb4035e6c00f0f4c8554ad0d1c89a45ded67dbcc34520d", 0x4c}, {&(0x7f00000001c0)="9482d26ff5ca3bdda1d46a177ee5882ce6d07b9edf5d1b6b87f8ee74981caeed2a07ba1353f55408a66a4d1a407f9c1d57", 0x31}, {&(0x7f0000000280)="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", 0x1000}], 0x3, &(0x7f0000001780)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xc0, 0x4000081}, 0x4000800) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000001880)=@req={0x3ff, 0x5, 0xffffffffffffff7f}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:33:31 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x4305], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x6801, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 463.578414] FAT-fs (loop2): Directory bread(block 128) failed [ 463.585659] FAT-fs (loop2): Directory bread(block 129) failed [ 463.591717] FAT-fs (loop2): Directory bread(block 130) failed [ 463.598357] FAT-fs (loop2): Directory bread(block 131) failed [ 463.604465] FAT-fs (loop2): Directory bread(block 132) failed [ 463.610930] FAT-fs (loop2): Directory bread(block 133) failed [ 463.617403] FAT-fs (loop2): Directory bread(block 134) failed [ 463.623424] FAT-fs (loop2): Directory bread(block 135) failed [ 463.629804] FAT-fs (loop2): Directory bread(block 136) failed [ 463.635834] FAT-fs (loop2): Directory bread(block 137) failed 03:33:35 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x3, 0xc2, [], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/194}, &(0x7f0000000340)=0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae6a, &(0x7f0000000280)) 03:33:35 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff82], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x5a, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:35 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x4, 0x3, 0x4, 0xfdb, 'syz0\x00', 0x7fff}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7fffffff, 0x1, 0x7}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e21, 0x3, @loopback={0x0, 0x1}, 0x9}}}, 0x84) io_setup(0x8, &(0x7f00000001c0)=0x0) io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0xffff, r0, &(0x7f0000000200)="d9dee5b60a57c14723c5e97638195f56a043b1d1aaa4d0d64b44758f27040a2a672d27c7085a52589b357c0bc6e2a10134e996db462c9971ecb9326412b004d97c7455ba97205d8bf6a957554ce29f19cd52c05f073d35d8c345b0ff3445d02104d9984f63fb4d5e2773ceebf7e37e9fb7142da114cfeebd7bc191dfe827f06544c3f3f3185b2d0c75622ba3cc2fcba1325fe4791b8f608b9c8b", 0x9a, 0x80000000, 0x0, 0x0, r0}, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000340)={0x400, 0x8, [0x7, 0x2]}) io_submit(r2, 0x3, &(0x7f00000005c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x22a3, r0, &(0x7f0000000380)="b35c2df0692b", 0x6, 0x101, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000400)="befe265a42e6b75271252cbaa89d5349578ceda861713311e4a825748fb5e3d82a5bddf2f40154a972d67cd55d6a1334520484f0fd4c177ad81c3f1d00", 0x3d, 0xe9e, 0x0, 0x0, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1a, r0, &(0x7f0000000480)="99f9fa71986e4861ac615285a4623bd82a77cde15519ab5af2179570322ed1771463626718ff798011142436f76cb2516e75e7f46cac8c4905513f29171e1f48221a0c2308fbf5db3c2a3daf62e560a241d3e6d58080d34e2a9fcc7c1e2331e6afd35d3074f99f71913c43290218aee841ec8e11db37ff6b686cc9179398c76dff583cee482756fb51721ac9c775bbc65c1d793e3d8ba30836a9568a78b1e3b466ca0dca189eadfd1531c2dc62e9406b64e33bbaff6153b6610ac590bba0bf3112c30b762895672470805f9dd1bacabcbf11e644f4c2e906638f7a22179a8fb05858f03b958f142270037416", 0xec, 0x1, 0x0, 0x0, r0}]) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000600)={r1, 0x100000001}, &(0x7f0000000640)=0x8) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000680)="b9bc3432d7e47bb2dc44a5ecaad41c9db7a15e21e91a1ca09b995bf83e1cbeb5bfb335f68bd8f7c5372c55492db5a281665966beae1802430393937402b93a69aeffa44c30880cddc92f38210148111cad43c5844e5fe49d9e22fcca3613ceab8e9b6c6e5d881fc1c8ba2cdb8a56bb7dce57f8904b5094ba7cd85bbb6017b469fabd89819f1ea1e56bfad5a04077acd9c9da1747bfb352f54b7e6d5ef86211c966706b97d50a30229fc343d5fd6dcbc448730c5216b4bdde6a72b7e6", 0xbc) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000740)=""/186) execve(&(0x7f0000000800)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000840)='syz0\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='syz0\x00']) r3 = open(&(0x7f0000000940)='./file0/file0\x00', 0x1, 0x2) mkdir(&(0x7f0000000980)='./file0\x00', 0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00', r0}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000a40)={{0x0, @rand_addr=0x22, 0x4e24, 0x0, 'nq\x00', 0x1, 0xbc0, 0x37}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x2000, 0x4, 0x1ff, 0xffffffffffffff29}}, 0x44) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vcs\x00', 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000b00)={0x3, 0x4, 0x1000, 0x2, 0x6, 0x782, 0x2b9, 0x0, 0x7, 0x100000000, 0x400}, 0xb) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000b40)={0x1, 'veth0_to_bond\x00'}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000b80)={0xfffffffeffffffff, 0xffffffff, 0x6, 0x1, 0x5, 0x1f}) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000c00)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'vcan0\x00'}}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000c40)={0x9, 0x10001, 0xffffffffffff5780, 0xfb, 0x2, 0x800, 0x1, 0x4, 0x0, 0x67, 0xfff}, 0xb) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000c80)) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000d00)) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000d40)=""/235, &(0x7f0000000e40)=0xeb) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000e80)={0xc4b, 0x3, 0x1}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001100)={&(0x7f0000000ec0)=@in={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000f00)="404ace958129819a6b526b452323d0bfb9e3900d2937362935ebf5e5f1b236b46ce108937a87d2b7836ab02767d82eed4d399ae0fea7567a47f64384c3394ff2f2b18190194f17e4ce7e3f6b10233710d7e9bc0a3dc84eb8ba963303ed9e5e8443fb701f2176a1cb28ce9315489b30000121202f743f84f3dafded662936db7c084dfef4d82ac554994828d1ed40cdf215bcb292a50dd6ce27099b7fddd1249bc324567a97e79c570b4d7214e023a7bc7ecbd9e7", 0xb4}, {&(0x7f0000000fc0)="bfca458e316e2c2eee6584f1ad551f8511a72aa2670de7d2cf85f70812356cb8565304ec296673c022b5514a9b9d2dda75309799c89e950bb4231897eb7f6d3fa9", 0x41}], 0x2, &(0x7f0000001080)=[@authinfo={0x18, 0x84, 0x6, {0xcde}}, @init={0x18, 0x84, 0x0, {0x5, 0x7ff, 0xf9b, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x21}}, @dstaddrv6={0x20, 0x84, 0x8}], 0x70}, 0x0) connect$unix(r0, &(0x7f0000001140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) timer_create(0x7, &(0x7f0000001300)={0x0, 0x3f, 0x2, @thr={&(0x7f00000011c0)="4eb86ac77f2e249fc0987f2061e4b0e01d5beb4b5d69f99b3b65866d88ec78540fd7bd5a", &(0x7f0000001200)="f43d2c267634abe7ac293caef7c1430b0978fa017aa726a432a99ff2bab5400072e4484fc3ad08af7aac4b5851eaa3d2f3d6379550f871c81dc27fbc7e72ccc824cbd73212793a4241d2bbe36059f3fd80dcddf3eeba6d0c80398ccadf65ddf8a0d447c3267e917bff2c7fed9afaf4f4ae29ba1362a97d32b49ac38632f077243e1af3e341c1198b948c5733066298cafeb906dcfdb8faeed5b86748594079d247015f44ade59bd5be3e496207c0626d0be635b8213019d3d3711228eaf20bbf0d0d02d13475169be6627cc4342d09138da996ed1c0301f1f3e6d10da31554e1796a22"}}, &(0x7f0000001340)) pwritev(r4, &(0x7f0000001540)=[{&(0x7f0000001380)="0432d29a6ac3e3693eda4574bd0a54911580485fdf8ced9c3bd969f40ccf96aa74dddc931ca405546381e4828c27e30572083a4f8d3c33506d", 0x39}, {&(0x7f00000013c0)="25c3c3ee099f83be3fddf56c86d484f26c84ea14a70aa43a05f6c3d6f3d53c6d393de4f65d4a9b9b5b39137363127a5b627046fb685434f0ebe60613cf6ac2bb0a7412b78f33fe252072c2879119944d2d92d28dc36922fe8f2d078c38fd6da2882e32ab238afbc59653fb178bfe3fe5647c1898f3d1a826fc6ce635cb623deb9b2bd8ed59016a1b3a54e8311433dca3e7f4ab01b85ac54f97715af5dbd781636f719eec9e1b89a487aba30e85588dae8765cfbb6d92006ce9e90d8f3fd190ece9de55c54e7f0754dec23ff2b8102b53bc4b5a977048fa76", 0xd8}, {&(0x7f00000014c0)="147960c1267a3d9ff15b650063dae71640c7b4bb40370723ef6954afc3d9fe1ebd04950669d947f68c007a1b8db39609abc3ba0a0ad0fc747b2db689cea75dff76748ce8b834d389e0d56005", 0x4c}], 0x3, 0x0) 03:33:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x8, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:35 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x300000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0xc666}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x800) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000300)=0x6, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000)) 03:33:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x4000000}]) [ 466.920249] FAT-fs (loop2): Directory bread(block 128) failed [ 466.934463] FAT-fs (loop2): Directory bread(block 129) failed [ 466.942972] FAT-fs (loop2): Directory bread(block 130) failed [ 466.959121] FAT-fs (loop2): Directory bread(block 131) failed 03:33:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xffffff7f00000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:35 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8848000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1e6, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 467.015078] FAT-fs (loop2): Directory bread(block 132) failed [ 467.048868] FAT-fs (loop2): Directory bread(block 133) failed 03:33:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000200)) [ 467.078506] FAT-fs (loop2): Directory bread(block 134) failed [ 467.115298] FAT-fs (loop2): Directory bread(block 135) failed 03:33:35 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x88480000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1a1, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 467.150184] FAT-fs (loop2): Directory bread(block 136) failed [ 467.190136] FAT-fs (loop2): Directory bread(block 137) failed [ 467.241493] attempt to access beyond end of device [ 467.246525] loop2: rw=2049, want=311, limit=128 03:33:35 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x4888], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2400) ioctl$sock_bt_hci(r1, 0xc00448fb, &(0x7f0000000280)="3fc8bf7b8fe4cf9fe3223ade99d61e065dff25efc60b") setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x181000, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x0, r3, 0x1}) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 467.454986] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 467.558163] attempt to access beyond end of device [ 467.563207] loop2: rw=2049, want=312, limit=128 [ 467.567930] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 467.581560] attempt to access beyond end of device [ 467.586847] loop2: rw=2049, want=313, limit=128 [ 467.591561] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 467.648287] attempt to access beyond end of device [ 467.653358] loop2: rw=2049, want=326, limit=128 [ 467.658075] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 467.685161] attempt to access beyond end of device [ 467.690218] loop2: rw=2049, want=327, limit=128 [ 467.694932] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 467.711076] attempt to access beyond end of device [ 467.716179] loop2: rw=2049, want=328, limit=128 [ 467.720897] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 467.730781] attempt to access beyond end of device [ 467.735797] loop2: rw=2049, want=329, limit=128 [ 467.740529] Buffer I/O error on dev loop2, logical block 328, lost async page write [ 467.825171] attempt to access beyond end of device [ 467.830182] loop2: rw=1, want=2153, limit=128 03:33:36 executing program 0: r0 = socket(0x1, 0x3, 0x4f988ed7) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x3, 0x3, [0x0, 0x3ff, 0x80000001]}, 0xe) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@alg={0xe0, 0x10, 0x401, 0x0, 0x0, {{'wp256\x00'}}}, 0xe0}, 0x1}, 0x0) 03:33:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x14a, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:36 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xfffffffffffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getitimer(0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000000300)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x2) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000080)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r3, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x10) 03:33:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x6100000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:36 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xffffff8d}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xfffffff4}]) 03:33:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xf000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xdf, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:36 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff93], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 468.221408] FAT-fs (loop2): Directory bread(block 128) failed [ 468.247190] FAT-fs (loop2): Directory bread(block 129) failed 03:33:36 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045006, &(0x7f0000000000)) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x2, 0xa85, &(0x7f0000000080)="94feacabdba07c7908cc49569298835effc30b66c33a7ad5fcab85c1e266cd965e155960611d", &(0x7f00000000c0), 0x26}) [ 468.280254] FAT-fs (loop2): Directory bread(block 130) failed [ 468.287611] FAT-fs (loop2): Directory bread(block 131) failed 03:33:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xf000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 468.333413] FAT-fs (loop2): Directory bread(block 132) failed [ 468.359402] FAT-fs (loop2): Directory bread(block 133) failed [ 468.369553] FAT-fs (loop2): Directory bread(block 134) failed [ 468.375923] FAT-fs (loop2): Directory bread(block 135) failed 03:33:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x4a, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:36 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x800000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 468.392984] FAT-fs (loop2): Directory bread(block 136) failed [ 468.408188] FAT-fs (loop2): Directory bread(block 137) failed 03:33:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="7ee4a3fffb"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2000) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000000140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f00000004c0)=""/14, 0xe}, {&(0x7f0000000680)=""/169, 0xa9}], 0x6, &(0x7f00000007c0)=""/8, 0x8, 0x9}, 0x7ff}, {{&(0x7f0000000800)=@nl=@proc, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/166, 0xa6}, {&(0x7f0000000940)=""/240, 0xf0}, {&(0x7f0000000a40)=""/125, 0x7d}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f0000000b80)=""/23, 0x17}, {&(0x7f0000000bc0)=""/11, 0xb}, {&(0x7f0000000c00)=""/149, 0x95}, {&(0x7f0000000cc0)=""/14, 0xe}], 0x8, &(0x7f0000000d80)=""/44, 0x2c, 0x100000000}, 0x1}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e40)=""/84, 0x54}, {&(0x7f0000000ec0)=""/189, 0xbd}, {&(0x7f0000000f80)=""/27, 0x1b}], 0x3, &(0x7f0000001000)=""/222, 0xde, 0x4}, 0x4}, {{&(0x7f0000001100)=@un=@abs, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001180)=""/27, 0x1b}, {&(0x7f00000011c0)=""/245, 0xf5}, {&(0x7f00000012c0)=""/234, 0xea}, {&(0x7f00000013c0)=""/209, 0xd1}], 0x4, &(0x7f0000001500)=""/161, 0xa1, 0x9}, 0x3ff}, {{&(0x7f00000015c0)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001640)=""/175, 0xaf}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/109, 0x6d}, {&(0x7f0000002780)=""/242, 0xf2}], 0x4, &(0x7f00000028c0)=""/124, 0x7c, 0x80000000}, 0x3f5}], 0x5, 0x40002060, &(0x7f0000002a80)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 03:33:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x67, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 468.485927] attempt to access beyond end of device [ 468.491008] loop2: rw=2049, want=311, limit=128 03:33:36 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xf5ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x8008}]) 03:33:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1ed, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 468.683095] FAT-fs (loop2): Directory bread(block 128) failed [ 468.702352] FAT-fs (loop2): Directory bread(block 129) failed [ 468.716767] FAT-fs (loop2): Directory bread(block 130) failed [ 468.731737] FAT-fs (loop2): Directory bread(block 131) failed [ 468.745570] FAT-fs (loop2): Directory bread(block 132) failed [ 468.759417] FAT-fs (loop2): Directory bread(block 133) failed [ 468.773224] FAT-fs (loop2): Directory bread(block 134) failed [ 468.785912] FAT-fs (loop2): Directory bread(block 135) failed [ 468.798616] FAT-fs (loop2): Directory bread(block 136) failed [ 468.827795] FAT-fs (loop2): Directory bread(block 137) failed [ 468.854977] attempt to access beyond end of device [ 468.860086] loop2: rw=2049, want=311, limit=128 [ 468.886294] attempt to access beyond end of device [ 468.891309] loop2: rw=2049, want=386, limit=128 [ 468.900960] attempt to access beyond end of device [ 468.905971] loop2: rw=2049, want=312, limit=128 [ 468.910699] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 468.918734] attempt to access beyond end of device [ 468.923734] loop2: rw=2049, want=313, limit=128 [ 468.928506] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 468.936456] attempt to access beyond end of device [ 468.941410] loop2: rw=2049, want=326, limit=128 [ 468.946102] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 468.953938] attempt to access beyond end of device [ 468.958892] loop2: rw=2049, want=327, limit=128 [ 468.963601] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 468.971438] attempt to access beyond end of device [ 468.976403] loop2: rw=2049, want=328, limit=128 [ 468.981146] attempt to access beyond end of device [ 468.986138] loop2: rw=2049, want=329, limit=128 [ 469.008830] attempt to access beyond end of device [ 469.013836] loop2: rw=1, want=385, limit=128 03:33:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x4, 0x400}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000011000/0x14000)=nil, 0x14000}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x7, 0x4) 03:33:37 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xf0ffffffffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x184, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:37 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x400000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x7, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x1}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback=0x7f000001}, 0x1c9) 03:33:37 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)={0x7, 0xbf7, [{0x8597, 0x0, 0x10000}, {0x4, 0x0, 0x10000}, {0x2, 0x0, 0x4}, {0x86, 0x0, 0x2}, {0x7, 0x0, 0x3}, {0x10001, 0x0, 0x40}, {0x863c}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xf4ffffff00000000}]) 03:33:37 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0xc2}}}}}}, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000300)) 03:33:37 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8cffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 469.287569] FAT-fs (loop2): Directory bread(block 128) failed [ 469.319678] FAT-fs (loop2): Directory bread(block 129) failed 03:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x32f, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1ec, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 469.336664] FAT-fs (loop2): Directory bread(block 130) failed [ 469.345511] FAT-fs (loop2): Directory bread(block 131) failed [ 469.352445] FAT-fs (loop2): Directory bread(block 132) failed [ 469.359432] FAT-fs (loop2): Directory bread(block 133) failed [ 469.410230] FAT-fs (loop2): Directory bread(block 134) failed [ 469.423664] FAT-fs (loop2): Directory bread(block 135) failed [ 469.444391] FAT-fs (loop2): Directory bread(block 136) failed 03:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x1000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:37 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x800e0000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:37 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="7b9f185f2c7af999f3c9adb7a583bc"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 469.458812] FAT-fs (loop2): Directory bread(block 137) failed 03:33:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x57, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 469.522246] attempt to access beyond end of device [ 469.527358] loop2: rw=2049, want=311, limit=128 03:33:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x205, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:38 executing program 0: r0 = memfd_create(&(0x7f0000000040)="000276d43857a72667ae19eae24522680b00000000000000000000", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r1, r0) r2 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r2, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x5d76dbb9fe0d7860, 0x0) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 03:33:38 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff8f], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x400000000000000}]) 03:33:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000080)="04"}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)}, 0x10) 03:33:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x1f00, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:38 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x700000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:38 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = getpid() r3 = getpgid(0xffffffffffffffff) tgkill(r2, r3, 0xc) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) ptrace(0x4201, r4) 03:33:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:38 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x700], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x111, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 470.201376] FAT-fs (loop2): Directory bread(block 128) failed [ 470.229124] FAT-fs (loop2): Directory bread(block 129) failed [ 470.257836] FAT-fs (loop2): Directory bread(block 130) failed 03:33:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x75, 0x101841) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x1) ioctl(r1, 0x800, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(0xffffffffffffffff, &(0x7f000000a700), 0x3a6, 0x0, 0x0) getitimer(0x5, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000140)={0x3, 0x5, 0xde3, 'queue0\x00', 0xffff}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) 03:33:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0xffffffffffffff82, 0x15, 0x207, 0x0, 0x0, {0x9, 0xf0ffff, 0x600}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 470.309155] FAT-fs (loop2): Directory bread(block 131) failed [ 470.337540] FAT-fs (loop2): Directory bread(block 132) failed 03:33:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x3000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 470.376672] FAT-fs (loop2): Directory bread(block 133) failed [ 470.411075] FAT-fs (loop2): Directory bread(block 134) failed [ 470.442725] FAT-fs (loop2): Directory bread(block 135) failed [ 470.459649] FAT-fs (loop2): Directory bread(block 136) failed [ 470.465835] FAT-fs (loop2): Directory bread(block 137) failed [ 470.517194] attempt to access beyond end of device [ 470.522274] loop2: rw=2049, want=311, limit=128 03:33:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000006c0)=ANY=[]) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xfe4d) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000140)={0x0, 0x8001, 0xfffffffffffffffe, 0x0, 0x2, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}]}) 03:33:38 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x8060000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x9b, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:38 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xffff000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:38 executing program 3: unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73ff7a6b04436c5b0a0000000000008d", @ifru_map}) r0 = socket$inet(0x2, 0x3, 0x2) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0xffffffffffffffcf) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000000c0)=""/176) 03:33:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYBLOB="6000b7bd03b2d3b74c7efcfcfcb432c954925ad55b9a6d013f9504b0b972ce570664458d3f4f72dc853e5b139b11ab853fb182b4f85c996ef826277ed9f566a0eecdaf3403951df91fb4472e0be218d278bea972079458c43f1f873687709f2695378cf5bd0904d1f72d9d1ebc2b25f29da581ffb376ce4afc6300abe805dcf04eddd22203759facdc8d65929d30a4ad0e99838969e4c8cc0b77032681f5002a6d4bf467201821919d63cbb0bcb28c21b8b2dcfbb98e63aa81b6ee6534ec7e73e35733bb220850fa3e65203300000000000000000000000000000000031ba667960559e37a17f121128e884cab43965bc1ab93f27a083f024f7ed6d9c55c3aec887bd209efd2db86f7b958a60084422a970aa5126f0784ac2cc7c431a40e5913174bcd38006aec838ba7110658542d08bba8507038232e318d853a955d27e3957ee552b8b1706509b389c5b0cba62263b161f46f428e87242dcba3ead084d40b3dc4e08f"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) r4 = geteuid() r5 = getgid() syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x1000, r4, r5, 0x4b5b, 0x1000, 0x200802) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xffffffff00000000}]) 03:33:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xf00000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 470.715523] IPVS: ftp: loaded support on port[0] = 21 03:33:39 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x200000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x82, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x40000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:39 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004daff0)={&(0x7f0000006fb8)=ANY=[@ANYBLOB="05000000600300000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000001000100000000001c25e50766"], 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "510200"}}, 0x48}, 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x40, 0xc001) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000180)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x20080, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000080)={{0x46d7, 0x1}, 'port1\x00', 0x10, 0x0, 0xa27, 0x10001, 0x1, 0x20, 0x1, 0x0, 0x1, 0x5}) [ 470.812595] FAT-fs (loop2): Directory bread(block 128) failed [ 470.861348] FAT-fs (loop2): Directory bread(block 129) failed [ 470.892641] FAT-fs (loop2): Directory bread(block 130) failed 03:33:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1bc, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0xf0ffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 470.917207] FAT-fs (loop2): Directory bread(block 131) failed [ 470.932479] FAT-fs (loop2): Directory bread(block 132) failed [ 470.938886] FAT-fs (loop2): Directory bread(block 133) failed [ 470.951648] FAT-fs (loop2): Directory bread(block 134) failed [ 470.958437] FAT-fs (loop2): Directory bread(block 135) failed [ 470.964947] FAT-fs (loop2): Directory bread(block 136) failed [ 471.017284] FAT-fs (loop2): Directory bread(block 137) failed 03:33:39 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="600000ff96b543d0115ae4c46e5d6d919bbc3973200ac782d295356bf7c8a896b1cd03b125550ab35e819201003b86819dc1c68debb5d2ab03d74c724267b0d93d2a0b25303ee74b959dad01dbbe7d81ed0405bd51ceaa"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:39 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x300000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x48, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xffffffffffffff7f}]) [ 471.070185] attempt to access beyond end of device [ 471.075281] loop2: rw=2049, want=311, limit=128 03:33:39 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x700000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 471.225605] FAT-fs (loop2): Directory bread(block 128) failed [ 471.252362] FAT-fs (loop2): Directory bread(block 129) failed [ 471.275670] FAT-fs (loop2): Directory bread(block 130) failed [ 471.291142] FAT-fs (loop2): Directory bread(block 131) failed [ 471.297958] FAT-fs (loop2): Directory bread(block 132) failed [ 471.309171] FAT-fs (loop2): Directory bread(block 133) failed [ 471.320908] FAT-fs (loop2): Directory bread(block 134) failed [ 471.333670] FAT-fs (loop2): Directory bread(block 135) failed [ 471.342858] FAT-fs (loop2): Directory bread(block 136) failed [ 471.348978] FAT-fs (loop2): Directory bread(block 137) failed [ 471.369204] attempt to access beyond end of device [ 471.374220] loop2: rw=2049, want=311, limit=128 03:33:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1d7, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:39 executing program 3: syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@subvolid={'subvolid', 0x3d, 'trusted]'}, 0x2c}]}) 03:33:39 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x84ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:39 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xe803000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x4a01, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xfffffffb}]) 03:33:39 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000140)="1f0000001e00076d080200000000510307000000ef0477b6f1d7298ee56600", 0x1f) 03:33:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xef, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:39 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x81ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6}, 0xb) sendto$inet(r0, &(0x7f00000000c0)="8cfa774007b8aead8c0326f26ed460527d9a2fcbd3e85517ccf8c2b686df437ef7e543ac72ff382e28823221935f5ce2b533655e0a8a006d5bdcb6ba18d293a6eff862b5b365aabe9106b08060deaa7f529164b01c3537210e74ec02bf412c14814fba1a4ab4a4be94dcf9951ff586d98bc37ab36c1cc7b2c082f868aed83013142d39741d", 0x85, 0x40040, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) 03:33:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x9003000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 471.626378] FAT-fs (loop2): Directory bread(block 128) failed 03:33:40 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x90000, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x9) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0xffffa888], [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x28, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:40 executing program 3: syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@subvolid={'subvolid', 0x3d, 'trusted]'}, 0x2c}]}) 03:33:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1c9, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 471.675296] FAT-fs (loop2): Directory bread(block 129) failed [ 471.708294] FAT-fs (loop2): Directory bread(block 130) failed 03:33:40 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff89], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 471.759568] device bridge_slave_1 left promiscuous mode [ 471.765194] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.778274] FAT-fs (loop2): Directory bread(block 131) failed 03:33:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x2f03000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) recvfrom$packet(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001240)=0xe8) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001340)=@get={0x1, &(0x7f00000012c0)=""/107, 0x6}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001280)={'vcan0\x00', r2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000001900)={'bpq0\x00'}) fgetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)=""/40, 0x28) getpeername$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001100)=0x14) 03:33:40 executing program 3: mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000001080), &(0x7f00000010c0), &(0x7f00000001c0)={0x77359400}, &(0x7f0000000000)={&(0x7f0000001140), 0x8}) 03:33:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x91, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 471.820967] FAT-fs (loop2): Directory bread(block 132) failed [ 471.836165] device bridge_slave_0 left promiscuous mode [ 471.841856] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.848984] FAT-fs (loop2): Directory bread(block 133) failed [ 471.855952] FAT-fs (loop2): Directory bread(block 134) failed [ 471.875225] FAT-fs (loop2): Directory bread(block 135) failed [ 471.909935] FAT-fs (loop2): Directory bread(block 136) failed [ 471.940532] FAT-fs (loop2): Directory bread(block 137) failed [ 471.987998] attempt to access beyond end of device [ 471.993118] loop2: rw=2049, want=311, limit=128 [ 472.022738] team0 (unregistering): Port device team_slave_1 removed [ 472.062505] IPVS: ftp: loaded support on port[0] = 21 [ 472.078426] team0 (unregistering): Port device team_slave_0 removed [ 472.093664] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 472.116675] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 472.145384] bond0 (unregistering): Released all slaves 03:33:40 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x32}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:40 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x6], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x76, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000100) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3fffd}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)=ANY=[@ANYBLOB="f7b97f0612b0507bad0587e8239605107c5cea7db08dd1b2244938af0b79249f803452a7e9b7f78db5b9d0b5508899b421ecb094e89d6dee44359bb266e264ac233ecf8b03898420df23a3a2fc4f68c711550428d75cdcb98c9d667f9b7b7d81020a3692c823056be3fda5f4bb3ab22999dd9286aec51b87bfe4d5cde9c186f4223a6ef19abc", @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000740)=ANY=[@ANYPTR64], @ANYPTR], @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r0, 0x10, 0xc, 0xc740) 03:33:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x4}]) 03:33:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x7000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x9003, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:40 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x28], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 472.602324] FAT-fs (loop2): Directory bread(block 128) failed [ 472.645203] FAT-fs (loop2): Directory bread(block 129) failed [ 472.651385] FAT-fs (loop2): Directory bread(block 130) failed [ 472.693957] FAT-fs (loop2): Directory bread(block 131) failed [ 472.720516] FAT-fs (loop2): Directory bread(block 132) failed [ 472.741494] FAT-fs (loop2): Directory bread(block 133) failed [ 472.766348] FAT-fs (loop2): Directory bread(block 134) failed [ 472.784410] FAT-fs (loop2): Directory bread(block 135) failed [ 472.799695] FAT-fs (loop2): Directory bread(block 136) failed [ 472.820820] FAT-fs (loop2): Directory bread(block 137) failed [ 472.848598] attempt to access beyond end of device [ 472.853616] loop2: rw=2049, want=311, limit=128 [ 473.563834] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.570240] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.578456] device bridge_slave_0 entered promiscuous mode [ 473.616210] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.622612] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.629928] device bridge_slave_1 entered promiscuous mode [ 473.666229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 473.701956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 473.803350] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 473.836319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 473.968271] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 473.975548] team0: Port device team_slave_0 added [ 474.001447] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 474.008533] team0: Port device team_slave_1 added [ 474.034266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 474.060914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.090319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 474.118525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 474.477193] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.483630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.490335] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.496725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.505615] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 475.232166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.649945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.731217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 475.811114] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 475.817291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.824837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.896256] 8021q: adding VLAN 0 to HW filter on device team0 03:33:44 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3d8, 0x8000) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x100, 0x4) 03:33:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1bf, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x10000e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x5e0, [0x0, 0x20000700, 0x20000a54, 0x20000bd4], 0x0, &(0x7f0000000080), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x41, 0x0, 'veth0\x00', '\x00', 'ip6tnl0\x00', 'veth0_to_bond\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd4, 0xd4, 0x11c, [@m802_3={'802_3\x00', 0x8, {{0x7e, 0x1}}}, @owner={'owner\x00', 0x14}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x0, 'syz1\x00'}}}}, {{{0x11, 0x0, 0x88ff, 'bond_slave_1\x00', 'dummy0\x00', 'ip6tnl0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xdc, 0xdc, 0x208, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0x0, 0xff], 0x0, 0xfffffffffffffff8, 0x0, 0x0, @empty, [0xff, 0x0, 0x0, 0xff], 0x0, 0x0, 0x24}}}}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:hwdata_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x0, 0x2, 0x0, 'team_slave_0\x00', 'veth1_to_team\x00', 'vlan0\x00', 'tunl0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [0x0, 0x0, 0x0, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xd8, 0x108, 0x150, [@owner={'owner\x00', 0x14, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @mac={'mac\x00', 0xc}]}, [@common=@dnat={'dnat\x00', 0xc, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'tunl0\x00', 'dummy0\x00', 'eql\x00', 'ip6tnl0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @empty, [], 0x70, 0x70, 0xac}}, @common=@RATEEST={'RATEEST\x00', 0x18, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x6a0) 03:33:44 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x7fffffffffffffff}]) 03:33:44 executing program 3: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x0) exit(0x2) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000280)="95e06831855d5d89115c6766274cc2fbc558a8d4e850317ae8cc3100b30fe862442bfbe1a46e2399a83a99e7aaac39cd053c2da42f2f632635d9ced7798c9d8ceba8890ccee180", 0x47, 0x4000, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='/dev/loop#\x00', 0x0) 03:33:44 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x11}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) [ 476.341865] dccp_v6_rcv: dropped packet with invalid checksum [ 476.364354] dccp_v6_rcv: dropped packet with invalid checksum 03:33:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 476.439431] kernel msg: ebtables bug: please report to author: Wrong len argument [ 476.477183] FAT-fs (loop2): Directory bread(block 128) failed 03:33:44 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3c00], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xfd, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 476.506553] FAT-fs (loop2): Directory bread(block 129) failed [ 476.514085] kernel msg: ebtables bug: please report to author: Wrong len argument [ 476.538153] FAT-fs (loop2): Directory bread(block 130) failed [ 476.558334] FAT-fs (loop2): Directory bread(block 131) failed 03:33:44 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xd], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:44 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tgkill(r1, r1, 0x21) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$getregs(0xc, r1, 0x0, &(0x7f0000000000)=""/230) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f000051d000)='ns/user\x00') r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, &(0x7f0000000180)="c4e2699711c4c10c566b1a66b814010f00d80fc71f0fc7280f01dfdbc4b9800000c00f3235000800000f30c4e1f914a2b40000000fc76db3", 0x38}], 0x1, 0x0, &(0x7f0000000340), 0x0) [ 476.602192] FAT-fs (loop2): Directory bread(block 132) failed [ 476.633678] FAT-fs (loop2): Directory bread(block 133) failed 03:33:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x50, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 476.659139] FAT-fs (loop2): Directory bread(block 134) failed [ 476.694509] FAT-fs (loop2): Directory bread(block 135) failed 03:33:45 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:45 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x8802) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 476.729678] FAT-fs (loop2): Directory bread(block 136) failed [ 476.752330] FAT-fs (loop2): Directory bread(block 137) failed 03:33:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x63, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 476.803999] attempt to access beyond end of device [ 476.809142] loop2: rw=2049, want=311, limit=128 03:33:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:45 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x3c00000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0xffff000000000000}]) [ 477.000137] FAT-fs (loop2): Directory bread(block 128) failed [ 477.010790] FAT-fs (loop2): Directory bread(block 129) failed [ 477.034486] FAT-fs (loop2): Directory bread(block 130) failed [ 477.049332] FAT-fs (loop2): Directory bread(block 131) failed [ 477.060787] FAT-fs (loop2): Directory bread(block 132) failed [ 477.067470] FAT-fs (loop2): Directory bread(block 133) failed [ 477.073628] FAT-fs (loop2): Directory bread(block 134) failed [ 477.079908] FAT-fs (loop2): Directory bread(block 135) failed [ 477.086199] FAT-fs (loop2): Directory bread(block 136) failed [ 477.092372] FAT-fs (loop2): Directory bread(block 137) failed [ 477.115734] attempt to access beyond end of device [ 477.120803] loop2: rw=2049, want=311, limit=128 03:33:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e) 03:33:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1c6, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x391, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:45 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x83ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x1000000}]) 03:33:45 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x6c}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x10, 0x802, 0x0) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@rc={0x1f, {0x0, 0x5, 0x50, 0x3, 0x0, 0xe16}, 0x80000000}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="42d27342a6fc0659234771aa3ec45bba8f2d0b1756a18c6c33da9dc7292f1647e37a23677b20a3713e5dae411be129c011d0addf7592c309ce153b2df9bb3ea8661e0a9d863bcf9b82361263f5c146171bb27a747536a1bc9f1ea1ed182d462dae6d1564a211b15599899c041580d2ad07d3b72276a5c0c345b3b571cb1b240839ece94c790b4580a89ba4706f1a388ce9f8abe1e1de4fa2dfa395b643d8e3e606abe1eb8626d72484818d5ae243905d35e49b3f51e42d6d3bd5d483f0e635345c1f4b1a16fd923237687a49b97ab88659c2ce273520e966e024fa00bcf88d7b65545ed7ee2982a2", 0xe8}, {&(0x7f0000000280)="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", 0xff}, {&(0x7f0000000380)="ab8ede40b24b604d1fabcfa94da525000cd29cfe53f64180d7cade9da6791d760a1acaf29bbba2af3241906c27b64d5fbe32f20d516280d7015f378cd5c68c4eca7bfb1426843c22172f778c4cdebecba46386b5cf67b220f420b63f567b9c3979347e5b35ffc5202f95b446666791ec21f428d7010558024edc163bd5b2a2363722119e964b9bb2db608d8c91f032f3f72b1dfb6e79921796c04c6f350c51fe0e88f656c99d03c1d1a30b9e6d7c9416d6059f0406f5afa2c503e4050e04aece79bfa881b8de8139b95cb1d09892ca0c68748d77da98b4c51c5dac3614374d90", 0xe0}, {&(0x7f0000000180)="9048d28e1d16152f32f6b6c7503c564c19f669afc836104a1d7d5f5028ed34c3d69b0a548c30d9915a20a1c3197d248471c5475e2c4bd44583f42ece3280e35063fa33389181d1bbf84cd97c4da067f14ffe4ebb06bcc52fd4c2a49030971839ea79661330a80c22499d", 0x6a}, {&(0x7f0000000480)="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", 0xfa}], 0x5, &(0x7f0000000600)=[{0x70, 0x29, 0x6, "465ab50ce3b389e46a2133db6c1be904bcc2d9c802bfe0ebffbe7c4cdb9f8fcef5192758bc9f92e105ee3788c15ff9ebc23e4646a19893e915e604b78809891bdae9cc26c40ad6a45ec9728870cd91a5ed4d14f598dd022a571f"}], 0x70, 0x40}, 0x6}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="a3038b792adcfa150b6fb8fe029dd5c6cc4af9ed117f", 0x16}], 0x1, &(0x7f00000006c0)=[{0xf8, 0x102, 0x100, "8b02d9d1332e95fa5d11ad063fa0c8664db899b858f130186d0678a14a14bb8a89672ad0387b54e4ecfca075bcd16a483b16e3b57ba03cb7f2e54912b4942f80e4efc79a4ee5f71f19e02308520ff2bf236013cd7cd352e48b35186cf5d7f3ebd569f34aaa88cfc6edac7d3ded4a25fbe2d338e05dcbaf4b8cc2a66e6390b24046da6e0d899d0dc3649ae7e5e6740daa862d3ab1fff08cae4b1aef259d4843d419cef1fc2f2b0289022daaa92a7897dfba813cd8f0b3aff83a7e44020cd16c558da5179cd0c2f30281ee1a7433e7537411598aff9333d7081e68312806da8f1c81a3"}, {0x80, 0x105, 0xd, "590178a68be1212a0e32f15c9571f3d844ba7ab146db56ef76ae1fe7149aec6704f5ccc8c5a72b68c4f55fd230935b91ddab091e0ad80ce7e010aa2a0528faee96386aca4a0301c1954457bca193d80a6f581437a75c142540630ea0b882d9c45b4a7fb77eecd21fababbd31"}, {0xf8, 0x107, 0x1, "c1d9e199d3dfca15e96cdb102b4ec5a693e6a838ab2d63a297ab9c9717be4a8178d47d10b79fe5fbb136b9de669d5a11ae945c28fd0f6633339925d5ffdcf346419a766da12912f2f3696c5209757ad3800e3bad4620e92905c59c2ea4a3c75e89bb6e44d6c1d672d08a97cfb7f69baefaf1d3f81c395c37fbfe27bdcbbd964434f61b7c3794cbf83133e8e6c58fdbfdf0c9e20a646cf24c1f8337ff3b0767dd13a38024f9f52fa3db138b6b2dcf61b6fe635f79928908b33a5ff63da954953a4d18f8f969e2ade7252c389407022995939ce39d1fff8ceebe3f9ef122b194a745190d314d425959"}, {0x50, 0x88, 0x100000000, "bedc27e6e3806f458c3dd68291501f01b5a509cfde7383040a921772bfa019ca12b240e642b73381969ab5b6ef77cc62fc1d97290417537d07"}, {0x40, 0x84, 0xafd, "0d65cbe95f4a8d21acfd79534716f08a3b85a81894233d0614be6ec8522c5f2b5fe840603edede6d1e2a960b7334"}, {0x98, 0x114, 0x3, "1e8f62847ce1331b4910fdd009bb848ee0bc80d4441ce173356751ebd1f634e6a72b82afba1ece7c2bbade5dccfa1ff5e594669a9cf54afccedff589a3b603572f1c337374a5e8e4f7c1bb757852ce25537b147723276d464ab2baae203ae04bd002884bde0f2b06c8b188a617d90e325a7643c653862b989f6ac83c75c870283f22aad7cb4d4f"}, {0xe0, 0x1ff, 0x5, "e8733b59059b29bcb8e3f6147839623a0461af14b0214acb88fadbbcdc460f3da5cab90065ffbaf13861a653da38bddc22c3d61b18fa31425d33d7c967620707d2c0156816c879f4cba82511798335ee7eb173d2ba0bfedff55841a81c4248973af86caf03857253c6634139d7d66512038a277f7509efd4bdf73ebd755d35b39a1281e76a0f7f9e18ad8bef23b407dd41b672115a982d6b6ca287d13e75a2248a2185a134b2dddb35cd3b067d90a0629178a072a654125f25482df1f3a543ff3db89cee5c69706925c7428cd84b72"}, {0x98, 0x107, 0xffffffffffffffff, "64cd807c12f711cc578c8696e1bb1996c7698fe5d6bd2ad3a7d1a6501849942135524db3dfd8bbcb2e30d08b646d69ce71e67676e1c6251c8fee40e841b4b24dd9c1605e8f739968b23d46b5e7ae2619da48ca044edb97ec6a940c45d3fe6aafe8ad34af1681772c1c41cffbf77c1b0fffaf4ae3764d5ffeeceaa81999f5814e2ee0"}, {0x18, 0x11d, 0x4, "0a828f5ff97c18d1"}, {0x78, 0x10f, 0x1, "dcedb98f0b6b7b54a340e34877bee842a46b9b7e8471cb748bbc7c176cf5a1e0adf08d86594b954e60adebda35f4b43069d58a64ea606480a1d00872414170d4e4f7927252a328eaa793f9e643d88f767087771a86c99abe6625f5f70684c3611c6753"}], 0x5a0, 0x1}, 0x101}], 0x2, 0x0) write(r1, &(0x7f0000294f74)="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", 0xfc) 03:33:45 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="600000ff96c8a88818f88c7b6df6bb40768537547d69faa870489f88c1e157ef4397632a633e8c589f759043b19b806e811c76a71af5a0210b68231bd309cc85db91af92ebc8479240c1d956304992a07fb45ae0a9e8290c6ed4e08943bb7799e7f6cf16ddc4d11dc493864c824b6cd336abd478ebb3c1574ad9087c5e528e002d736262e437872961c26c0ad48854208c52ea0f28a857e205dea0c6a6ecbe2c2505a984379d44a90000000000"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x400, 0x9}, 0x10) [ 477.401317] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. 03:33:45 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x800e000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x23, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 477.455619] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. [ 477.477358] FAT-fs (loop2): Directory bread(block 128) failed [ 477.497194] FAT-fs (loop2): Directory bread(block 129) failed 03:33:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='io\x00') r3 = gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write$cgroup_pid(r2, &(0x7f0000000040)={[0x31]}, 0x1) 03:33:45 executing program 0: r0 = getpid() openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff, 0x10000000002, 0xfffffffffffffffc}, 0x5) r1 = fanotify_init(0x44, 0x400) r2 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)="441cdd10f679010f82d19a63eaf2f5976bb37a194739f7fb1d99d21831da7b50f025014dedac2322899b6d34aa3e043ea282f5a77768faa90a0794ecfd208561b984cfc67bb5ad296c14c5005c9334b68412a72b8c026816a874ffb01d43d4829c9c6aa4fbecc7305360bed9f114124921cc4dbd2e5b2bec0f3a171fd52125d02610e98256a1b3679c6193d677ef36dbddafd105ed86730e5abb22d25bf7221e491d73", 0xa3, 0xfffffffffffffffa) keyctl$update(0x2, r2, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000400)={0x4}, 0x1ab) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x9, &(0x7f0000ffe000/0x1000)=nil, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000001, 0x8031, r1, 0x3) pkey_free(0xffffffffffffffff) rt_sigaction(0x38, &(0x7f0000000100)={0x2, {0x4}, 0x18000000, 0x6}, &(0x7f00000001c0), 0x8, &(0x7f0000000200)) getgid() [ 477.550327] FAT-fs (loop2): Directory bread(block 130) failed 03:33:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x26050000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:45 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x80ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 477.616827] FAT-fs (loop2): Directory bread(block 131) failed 03:33:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x4c, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 477.657721] FAT-fs (loop2): Directory bread(block 132) failed [ 477.693879] FAT-fs (loop2): Directory bread(block 133) failed 03:33:46 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000000)=""/31) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, 'a?_'}, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="600000fb967583dfc375ff2996ff067b8318c9ba0f3b44cd472c377ff4d3d55b9968748e0bb65ec47566d0781f4683350a342b7382"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:46 executing program 0: capset(&(0x7f0000000180)={0x19980330}, &(0x7f00009b3000)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000440)={{0x4, 0x7, 0x4, 0x20, 0x9, 0x1}, 0x7, 0x6, 0xfffffffffffff800, 0x1, 0x62, "3af0c8dd56b6c03ae49e389febf896516941de73ae2f592590fff78900a901fed4f338e9e371db1cef212da9043d10bfeb19cdf12ca92f5cb0c7b1fa5c228bf9a982555f09ec957e05619f3ad4a25816e931947730ffc68177706f34670b0d903cecb30e141e3c1cd10772499dfdae446eed2c0b8aaca20fd4e508d5598d9d97"}) lookup_dcookie(0x0, &(0x7f0000000000)=""/62, 0x3e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x19, 0x6, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1c, 0x7, 0x1000, 0x32, 0x2e, 0xffffffffffffff9c}, 0x2c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x101020, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x101000, 0x0) ftruncate(r1, 0x7fffffff) read$eventfd(r2, &(0x7f00000000c0), 0x8) [ 477.713578] FAT-fs (loop2): Directory bread(block 134) failed [ 477.752101] FAT-fs (loop2): Directory bread(block 135) failed 03:33:46 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x80350000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x7a, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 477.764130] FAT-fs (loop2): Directory bread(block 136) failed [ 477.787679] QAT: Invalid ioctl [ 477.797325] FAT-fs (loop2): Directory bread(block 137) failed [ 477.823567] QAT: Invalid ioctl [ 477.848204] attempt to access beyond end of device [ 477.853257] loop2: rw=2049, want=311, limit=128 [ 478.005815] attempt to access beyond end of device [ 478.010912] loop2: rw=2049, want=312, limit=128 [ 478.015671] buffer_io_error: 2 callbacks suppressed [ 478.015684] Buffer I/O error on dev loop2, logical block 311, lost async page write [ 478.041082] attempt to access beyond end of device [ 478.046200] loop2: rw=2049, want=313, limit=128 [ 478.050927] Buffer I/O error on dev loop2, logical block 312, lost async page write [ 478.059328] attempt to access beyond end of device [ 478.064496] loop2: rw=2049, want=326, limit=128 [ 478.069204] Buffer I/O error on dev loop2, logical block 325, lost async page write [ 478.077361] attempt to access beyond end of device [ 478.082403] loop2: rw=2049, want=327, limit=128 [ 478.087170] Buffer I/O error on dev loop2, logical block 326, lost async page write [ 478.095197] attempt to access beyond end of device [ 478.100238] loop2: rw=2049, want=328, limit=128 [ 478.104969] Buffer I/O error on dev loop2, logical block 327, lost async page write [ 478.112851] attempt to access beyond end of device [ 478.117860] loop2: rw=2049, want=329, limit=128 [ 478.122555] Buffer I/O error on dev loop2, logical block 328, lost async page write 03:33:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xffffffffffffff7f}]) 03:33:46 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0xffffff81], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0ee545cf000000000000006f38800000720a00423efff6005d"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x1085, 0x1b1dba}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 03:33:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x152, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:46 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x4000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="b697c9ac3a90234baa9883e13a16df510184950027"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="672eff8b80e5660f38827e7b660feeebb96d0300000f32b8010000000f01c10f01df0f63757466660f38822dfd00000066b826010f00d866b86c008ed0", 0x3d}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 478.199284] attempt to access beyond end of device [ 478.204328] loop2: rw=1, want=2153, limit=128 03:33:46 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8864], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x8a, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4001, 0x0) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000000c0)=@routing, 0xffffffffffffff98) write(r1, &(0x7f0000000040)="f8", 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x14090) socket(0xf, 0x806, 0x9) 03:33:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x90030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:46 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff85], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:46 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'veth0\x00', 0x4000}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0001400}, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x410000) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x6) 03:33:46 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="60e10000ff"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xffff, 0x2, 0x4, 0x2, 0xffffffff}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="4e0000007974f53a5e6b058be84b041fb963eb763b6978b7a33aa4fd75efcb6897f804f0aa58cd17569856d299f56f758d361dfa425a21d83278dcea624b72c9252c78b9548505be2736ed94194e78ae7e7d"], &(0x7f00000001c0)=0x56) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f00000009c0)) [ 478.458551] FAT-fs (loop2): Directory bread(block 128) failed 03:33:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x186, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 478.505329] FAT-fs (loop2): Directory bread(block 129) failed [ 478.554289] FAT-fs (loop2): Directory bread(block 130) failed [ 478.566847] FAT-fs (loop2): Directory bread(block 131) failed [ 478.574143] FAT-fs (loop2): Directory bread(block 132) failed [ 478.588116] FAT-fs (loop2): Directory bread(block 133) failed [ 478.604690] FAT-fs (loop2): Directory bread(block 134) failed [ 478.611872] FAT-fs (loop2): Directory bread(block 135) failed [ 478.638291] FAT-fs (loop2): Directory bread(block 136) failed [ 478.645666] FAT-fs (loop2): Directory bread(block 137) failed 03:33:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xf4ffffff}]) 03:33:47 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x172, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 478.674673] attempt to access beyond end of device [ 478.679722] loop2: rw=2049, want=311, limit=128 03:33:47 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff8d], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 478.853333] FAT-fs (loop2): Directory bread(block 128) failed [ 478.878508] FAT-fs (loop2): Directory bread(block 129) failed [ 478.905401] FAT-fs (loop2): Directory bread(block 130) failed [ 478.929767] FAT-fs (loop2): Directory bread(block 131) failed [ 478.946253] FAT-fs (loop2): Directory bread(block 132) failed 03:33:47 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x800e}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x21, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:47 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r2, 0x1}}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x8010000000000084) sendto$inet6(r3, &(0x7f0000000240)="04", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) 03:33:47 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x800e000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 478.953421] FAT-fs (loop2): Directory bread(block 133) failed [ 478.959471] FAT-fs (loop2): Directory bread(block 134) failed [ 478.966145] FAT-fs (loop2): Directory bread(block 135) failed 03:33:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x4a01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xd3, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:47 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8100], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 479.008742] FAT-fs (loop2): Directory bread(block 136) failed [ 479.043101] FAT-fs (loop2): Directory bread(block 137) failed [ 479.084760] attempt to access beyond end of device [ 479.089821] loop2: rw=2049, want=311, limit=128 03:33:47 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff89], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:47 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/packet\x00') setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x33, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x1000000}]) 03:33:47 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xfffffffffffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 03:33:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000edb000)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x7, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10, {0x2, 0x4e22, @multicast1=0xe0000001}, 'rose0\x00'}) 03:33:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x198, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:47 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x4305000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 479.582898] FAT-fs (loop2): Directory bread(block 128) failed [ 479.608492] FAT-fs (loop2): Directory bread(block 129) failed [ 479.620121] FAT-fs (loop2): Directory bread(block 130) failed [ 479.632894] FAT-fs (loop2): Directory bread(block 131) failed [ 479.651461] FAT-fs (loop2): Directory bread(block 132) failed [ 479.665648] FAT-fs (loop2): Directory bread(block 133) failed [ 479.674124] FAT-fs (loop2): Directory bread(block 134) failed [ 479.680437] FAT-fs (loop2): Directory bread(block 135) failed [ 479.686893] FAT-fs (loop2): Directory bread(block 136) failed [ 479.693806] FAT-fs (loop2): Directory bread(block 137) failed [ 479.716540] attempt to access beyond end of device [ 479.721605] loop2: rw=2049, want=311, limit=128 03:33:48 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x700}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x137, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:48 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x82ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1c3}, 0xfffffffffffffd8f) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xf1, 0x800) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/252) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28}, 0x10) 03:33:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x4000000}]) [ 479.867746] device veth0_to_bridge entered promiscuous mode 03:33:48 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7ff, 0x202800) r2 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x20000) ioctl(r2, 0x4000008912, &(0x7f00000002c0)="295ee13130d7b9b1671070") getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x6, [0x4, 0x1000, 0xbb, 0xffff, 0x1f, 0x8]}, &(0x7f0000000100)=0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x0, 0x4}) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000140)={@local, @empty, @local}, &(0x7f0000000180)=0xc) [ 479.927944] device veth0_to_bridge left promiscuous mode [ 480.019316] FAT-fs (loop2): Directory bread(block 128) failed [ 480.057161] FAT-fs (loop2): Directory bread(block 129) failed [ 480.065278] FAT-fs (loop2): Directory bread(block 130) failed [ 480.084939] FAT-fs (loop2): Directory bread(block 131) failed [ 480.106722] FAT-fs (loop2): Directory bread(block 132) failed [ 480.132948] FAT-fs (loop2): Directory bread(block 133) failed [ 480.151635] FAT-fs (loop2): Directory bread(block 134) failed [ 480.162901] FAT-fs (loop2): Directory bread(block 135) failed [ 480.173735] FAT-fs (loop2): Directory bread(block 136) failed 03:33:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$rds(r1, &(0x7f0000001d40)={&(0x7f0000000040)={0x2, 0x4e23}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/155, 0x9b}], 0x8, &(0x7f0000001b00)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x1963}, {&(0x7f0000000240)=""/31, 0x1f}, &(0x7f0000000880)=[{&(0x7f0000000780)=""/216, 0xd8}], 0x1, 0x0, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000008c0)=""/4096, 0x1000}, &(0x7f00000018c0), 0x68}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3f, 0xfffffffffffffffe}, &(0x7f0000001900)=0xfff, &(0x7f0000001940)=0x2f, 0x1, 0x0, 0x8, 0x3, 0x3, 0xf63d}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @mask_cswp={0x58, 0x114, 0x9, {{0x86c, 0x1}, &(0x7f0000001980)=0x9, &(0x7f00000019c0), 0x6, 0xffffffff, 0x3f, 0xb7, 0x40, 0x7fffffff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x1}, &(0x7f0000001a00)=0x1, &(0x7f0000001a40)=0x2000000000000000, 0x187, 0x4, 0x10000, 0x9, 0x58, 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x3f, 0x1ff}, &(0x7f0000001a80)=0x6, &(0x7f0000001ac0)=0x3, 0x8, 0x0, 0xf3, 0x75d854ef, 0x5, 0x2}}], 0x208, 0x4}, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1e3, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x440000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, &(0x7f00000002c0)=@ioapic) 03:33:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(cipher_null-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000100)=""/49, 0x31, &(0x7f0000000200)=""/131}}, 0x68) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x30000000000, 0x4) 03:33:48 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x28000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 480.180496] FAT-fs (loop2): Directory bread(block 137) failed [ 480.198438] attempt to access beyond end of device [ 480.203476] loop2: rw=2049, want=311, limit=128 03:33:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xcb, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:48 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8848], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:48 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xe80}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xffffffff00000000}]) 03:33:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) recvfrom(r0, &(0x7f0000000040)=""/26, 0x1a, 0x1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2=0xe0000002}, 0x1, 0x4, 0x4, 0x1}}, 0x80) r1 = perf_event_open(&(0x7f0000000100)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x800000000000009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) 03:33:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc9, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:48 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x4788], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xd5020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001340)='/dev/ppp\x00', 0x8000000000181010, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000001200)={0x1, 0x8, 0x165c9582}) unshare(0x2000400) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000001380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000011c0)='/dev/ppp\x00') r3 = eventfd(0x0) times(&(0x7f0000000000)) io_setup(0x1, &(0x7f0000000040)=0x0) io_cancel(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000080)="5c1396ef9b009b6b846aff273260c5e518026c7917d14a826c7e1668d26f59932fb332bd02b95d43be35d5cdbc94bf87b434bea31ed03367ae0aecee71c3d59190322a8b3eeb428ab9b3b3c353776fc4cb3c45963618fd69565370c16e96", 0x5e, 0x5, 0x0, 0x1, r3}, &(0x7f0000000180)) r5 = semget$private(0x0, 0x7, 0x200000) semctl$GETZCNT(r5, 0x7, 0xf, &(0x7f00000001c0)=""/4096) [ 480.598266] FAT-fs (loop2): Directory bread(block 128) failed 03:33:48 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff80], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 480.651537] FAT-fs (loop2): Directory bread(block 129) failed [ 480.694933] FAT-fs (loop2): Directory bread(block 130) failed [ 480.721530] FAT-fs (loop2): Directory bread(block 131) failed 03:33:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x10a, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:49 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, 0x0, 0xfffff, 0xfffffffffffffffb) keyctl$reject(0x13, r1, 0xc5f, 0xffffffffffffff00, r1) [ 480.753159] FAT-fs (loop2): Directory bread(block 132) failed [ 480.771743] FAT-fs (loop2): Directory bread(block 133) failed [ 480.785822] FAT-fs (loop2): Directory bread(block 134) failed 03:33:49 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8fffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:49 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)="a51695e1e246b5b79f71d8a45300d89d9d36cfabc7ed6e09eff502b879c5c722a91810c443fb41c240945179d4016f948a7de12929bb1f43aa67719015f08f4485d657ee10714782b7b9b3af778f28f4bb2951ecab1cff49692d113ab6e65ab3de2eaa3aaa63e625445d27ae432f669439b5d38e1f5dd98a16ba97f11087d7fdbfae2910c66c67642decebe964b44c907b635b7e2583b5ca685daf58f1fc22519f1e052522e3517b449a1a1ba4aee0e0a21258d031cff87dfe76e3ae97f83d2acd5c32561254e62f97344dc580829da3ddde27ac98768a29ba73f1f9722dbd0135d69828f58bac31a59efa190e58c3a6e9c6435cc25cca493bb12a55cb926b2f20027b9db54bcbb45a1defa59ab95acdc57486b492abff20d7c9914a035dd98df46501818027405242a9a7bdf6a2c75b413db93d52ee716e7fc3e09aa4bc9418e399d1ad13fe70e6d4b3bf6d2ad3780dfbe2f3f11fccaad97b669526d2b54e041c8b3e3c634537b650a976c400405ad945789bfcc639daee2a9fa6d74b2c473bc84a4843ed34a72a26690360985c46907a4c8653cc2d13b8d7704a233ade3f60a9759ca4d632c60476a1ad315b08b4b54a078610f6a32758785abe55e43280a13fcc9c5d1453f3de1efb558212de3571ac0194a6652d09c59474096d1c3e7cac8df4c937979ddeb5a5a8cf8151f174d7904fcca2832d9732df5a19dc73163e598aed4048f5a41741cb7fa4db181145db3f8c4e56659477bacf0baec637e065d81d5040c14e3f77a34c68dca58f8142bcc43fc5b7f70c4413dcb7ee01680c729e1966dac99ab03b2ea8aa49762d66ee51c588d804d3fcf90e87354bbb35f51d1e2491c4d537d583494b530be926ab53ec3beb370529d24f27ab5262f089c86203f1553ddef807fb1a837c197bd9bac1d1b9a97472ff0d78519297fa195128a1cb66d13a96c514afcb728b1fc2b363d2fa8afb6247c0d57b2f3288db6318b6bb92e4f5423074dcc86cb59f0801844bc6b956125bbbbbeedd0a98b6ec6609eadbf51fd5125a12cc9137b17f5e6d2268cff810e973eebb4d6747135401c17e734214f59574ee86d5a8dbcdf976bd8b54f7e06be2bd7217ed2115b8ae2e3bd3553c123771e361ab4bc30fee1cd12e49d48442b644fdd938d96931173e614fd34c8377935d67ba42a33de9b1d7d0fc5a2bb35c655cc39d2565fa76e0d300150999950f5341268d4f9eb0532b76dae57590c2e392aa45568137f65b13dc9e0e46003848513c6db82d6a2591d1531058935123a341aa938fcd69757ade6316be376dd2a56a8a57877170f34d05520424ecca359cae5ac25a636fed2b3108b1f2780267ef86c838c68df88bccd9a94cdca4728f000b7ff2086a4ecbf30c5c76532ecb868f049f5648f0621903739c1785c24f7a5641a629df88268569a8fca3984c62c9796eac8d49218152dde8c0865cc932298d1b7ba56b92ad2d20358b4e5aef0bf536ad0840d2c50bcb40110d31411909c7e814cc18498eb4105883f88aed6dc6811237807b9577168e0fdae7c0b341482313c75fffeae7d9d61c44cbb4441398843d4aa5a5b9413ca7c6f584ae19264e75d59ca2988b22c658805fda3d12c6da69e033d36b9496f8db43c4ef822d9088bdfd8716f464c4717e0248bf54786505f03d0a1c742e4008981e2528d9442526be982e438e2a846a7e7b82500e3a190ae8592d722ffa2fe7b9387f3cf1d89dcceea2dbbdce6198dc1f371e3c99d6a406768055485eea0f65694e6f25d74f0ef09c3f387911555568b3ac9b6eb568ad641be1277b3deef338f1f8f4c8be56fb1f5c5374d0f44e1f9cb08465c4249f1285c50d835eac19475b19e3bf3e8dd2a5b6c54c4908c4fbc1a21664f6fd733a2bf5fee6be27272b161fecc2d7e165ac563cbe92fbaa6f37e2de5ea264dba83f27845c18a83c4e86bf90b5a316ba883f990a78f0200717bda663515f7524c0816f6360ac477f0343d7e6d5479c310886e74b1c1f2431ada46dff2af281253f55791300505aeed13608015b2fd919bcafa418625699cdb999933b7e79f1263de2deba3511da54d0dec835beaaf25c3683cbdced7b0473c9b1322543cc151d4b38d9d6143fdf4875fbccbe6df08b2f942c27c8aab72ae9d82b5485e048b185e30ebde19507ca900182c649b5b9fea093a233e300c93bead6a05de1632301a5ba3659630ee31cad978146ab698a2db2a0c812a186d18d75661668134e253f3692bb9e2c45caeb9f51b45ddaa689010e83368aa64b3f8ce706af519c8894be7b7ab20f20b62c3f88f490b834bc4662ea387271501178944ea7e133edb1ea2e6415784b8e4026f860dadcc872a3626da665da8b364b74795fc891f8e83e593f271f754c695d54a0a0c624bbfc0e04d942d9809d9c26c7b05ad9b910de1e9ffa8e5ecf472856acfb3e86fbd63b0174fd9f3f64305390d1b472e0f3a421b51d842f6ffd5d34bd214f70075fa90d6807bb974bdbc096d49b56d3ac396d4ac0b6b0e0a8fa321805b5d39f171933eca405708bca08347b7ac34b58ba86ec45c4380a0cdaadac1c3d2e3b6be505881619e25ff27e58024706e9a0ea0e305d66e388c6c78844cf8822db19eb60767cd262be4b1686a0ac3b6c7e43fcf5a71d118741f8b676319aa58773bbc9d5fae742947d5c7dd276d16b742bfd33d6132d68b9220b878a4af7375e95d64168ef3c4cd17129bb37bb2f10da892ebc5b9b7fded79a60e1e090d0891c0a9ba08adfb0e4aa153ba5d375b20bfb58ff10d7a903199e72e081810004fab5ce03ffe09949c581345983cdf7dac01976b413fc2d5e279b7698be21aec79100d751b7b5b8d97a68524f8db556487a54e152fc14755ed400ea2dfbedc4eec1e62e8a280ab43bc87a99cf6c8f4c12956e9e828d38aa54b266952bad6da8c36a8d54181b3683bbaaf0b6944090a68a9a9741a2041c172acbe22e00ab2a572f1687e63216e5dbeeca576eb75bf4b00c793f4cc5f217b5fc5c1a13442f2543814143360f457fbcf0d3ca85e18b59aa159b6ec35e916a33db4b65962317b32bd9e04f90d895b41dbf96f3e6d4ab4f9cec7d08ec0a3d58d1028b7210a7bb77d6e775dac6297f71b9762568d8a8e4176a371bc9a9f1a24fdb7b39786991b557e39668383be1f3a08fddc060015d18f4f35116724a1dabe01486faafb0996efb18861be611d78ef0c4a0018a081cfd98ace4130579371a48ada017d3a8796e0202c0a6cff4821821cf716dd9d92c067b8a611489978963e11a935a6774272d3cd67569426add09880ee6562764356b129efb543c41c6f90edba571c874e6043deeda47bbe6b1a963c62593d29ec64b86ebed03b2ddbade505326ae80084f605526c8112e13ecdc0b4ba2a0628b9f0e385abffb058e8fcacb6b01b50bd492bc3806c653c9aa2f4397f249f42dc588a16fb672e0caef7be7c51284a21eb9ad5def1f240e5922d76bb3d4a36449bd272e5b231154f31ec21f268fcafd66618f1f16b210bf8f8473c79c361e10b7d5e6632b294e0a93366eb807cef897e36b88e763ec2aafab498c859a1c61576cd96cd02a2a2861a414ce332a6fa3779cebeafd8e6836011da119c1f9f9914a2d0f4d4de4b50dbcffce0459c125e80fe0b95bae06808517e38d966afc2bdf158fc1f8f52517968ee0f67ed937e63681ccbf225619d92ffc2b8ef97cb1e7560ec417029b5b86682f280de3c51fc29b257dff99b31074acd4323c05c4938b1ba0485075deac68bc37b0b1a0248760fe08358e390cb6fbc54d501eaac64d8716f16ca0152262c3a05e946cae4b5ac2be2b232e70b3f99fcdf9c6fc0661c2b3dddb11d614a10dfc99645b1e14ef20af31be788eec4c72dd65548b036341db1762958348ece8c92b4d7f83ed16defa778284a6daec9a8f050a9e9b6ccb23d5c665eb7db816d8834f6a339bb686e4569da8d3681394e4a7119f0327ce9440eda0950c5045d00268c684ffab0f44699d75330ab3bec4a4307a1e45f7e0c1a5e99fe548103dd24fa25797f8620038777e83268fc52830f30dab327da0b7856e9ed7e8c18ae9bdbb03feec357563a8422a51ff2ab63d86059e1b2c3824ab260495902f74feaa05153e7289356bbba0e7df26e68315707eb1b521d1fea28ebb29336db7256c6af94babb250018f1617b8a2f2f9df6652a453113d0a5b4446161212805590cae979f79fe6a280d780db56b4e9625ee360366ac8d60ec87747fb203ac250944a179c24a731d96ae21acd2faddccd6e69150525ee907f1729b230add1446caf4a2f7c5c5101e5d48e16539035596884a52b1506f7a85ec45573223ab8fa02f1918f42ef07b8669321eaedbbcfb79dfc6ddf64e6b4788514841fd6e0a0bc85ebdf9a22f0ce7f84b27c6598c874e136c8b49925353ccd074341ee86d394dfdb926832f95a1e360cd7916febafde424f85ad74e64c24390009d78f25a23cbc9b2c39038b6abaabd72c062904e8297da0102d5a590c96c3896dc202259d12be3b75440d66a3c84cb0b1f42068f2106aef83e58ec11324daae7c908893c8a0f801bdf768eeffd9796c3369280c35d5ada5d390639d896c4cbad4bcdd456fe2cf89abae583fe3d2840dbf7a186c828038ca8522832453206c7f29898ce11ab7c4cd390e7f3867e88fee1383d8fe8b6f8f708fddbbe275fb1efbacd19477164412357a5ab9cd2302910cbae3696342eaeab87a7f7edcb4cd6c0df196852bc8d3324d21445ac82e1201f708019afdd15722412bc6cc34b1f6d81d201e47896e8fd9cdb481ca71a985a600a3fac8d2dc703cb243a6fd16a06cbd3a34a526afd850734ea0ca7e774e13a939ab181bf9c21770c64feafea8bce4d8f1ce0cc7ceed870fc6b14d00aafb632ebbec6dfb79a320384e019e7401744efac950697a8e07caf92c796da34ac512101024df38cabd1aa022b7fb7d6d8c1b06b291de8f2ca1c50521a47e9578dbfcf582268f5dc42495c8529f1c2c0af505a482af4d3541a0f0375e36f01cced005716e0e40a045830db0a3348bb3d249a5f3ea335a99eb100bc5203a7957b2825c9d9ed32dadea2bffa77019db912496f911598301de899d053a7e02921ca383e6a6d7f00c63b4d9a5a0a0b6374980b7bf911921bb3248cf16c4d28b5a422885b2dcadab3671d8bec8f85d72e096d16951e46a55161d028bd6722e44d3e8ed1e59d2515b1e93e27f90ee6fbc7f2f642bc798bdbdcaeffb997f9d5ba6e90cef763b698a6d34a59043cfbed87a4a7236e6c86a71fddaf4ce0d83fccab73397ce1faa5bd15bbf54296c491a7ed9ee54f06eff121ae7b404db077ab6cc5cba87e72838f233b8bae377561f66154ffed7a10e9f85624528b5fad6e3d13e97ac82cfd341b55677d0b628520adfbb43c5b230f3aab4edfe96d369e67b0e6e9a9c79b3acc31226535b66cec0beb198b09d17e11ece17715bb0721ccdfb88531f721a75f61a07d0d39c6e600ad6d0c0a186b76fc4ef66cf607ded7e6c9d73d9ae366fb16946ada59cfab9beb75e8654b0463db823a4ae887e3fae871dd1fd72b82caeb9d3fa5d9e4dbe795fec768fedaec2b09dba8b66c3e8e14a5cb5b1dd0fb416485e772dbfa1bf58c8c153bbc0c821721ebde54e5989a8b5bd141f1c9c735945bc1cbb8dc90d6cc6add03f49364070b44a383adde59077816f2c79df98ba495766a3031738bd3302adc7f3774005b75a6243cb0029c13f8089d0ff66e517624fa8d3053c5b71d040a2591b0e32d3dc0baef61ece0b06bff15e", 0x1000}, {&(0x7f0000000080)="4b365929e60f784204bbd9cc37619183869ec66a170a06ceb275a305e2880894c5df55164616f2dd14503d01b97596b2954e286f4b7c0f7b9b9db71d08dd0e50423507b1be548775355d740f01c3708c1c40a7656208b9565c31e00036e5c9ca7d7ec0cd07f8bf14c14382b52b2ada86c441164d4a5044b3e453e1a02b48176526f4927fca653384606256cf4c96230155519446fe97001d0946e05cf1a097d7178d4b23649ba370c1fb04bf1a8d7bdc187a0f54ef16256da0f71e2489c839a7b1787a1359a168910c2e41ae0a63eebc684f553a79bc916a9bd4f58823fe474690d2e7efc349d97f348b97f5e510cca0bd3e", 0xf2}], 0x2, 0x3) pwrite64(r0, &(0x7f0000002a80)="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", 0x103a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000340), &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]}, 0x108) [ 480.820203] FAT-fs (loop2): Directory bread(block 135) failed [ 480.840458] FAT-fs (loop2): Directory bread(block 136) failed 03:33:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x198, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 480.879125] FAT-fs (loop2): Directory bread(block 137) failed [ 480.951423] attempt to access beyond end of device [ 480.956535] loop2: rw=2049, want=311, limit=128 03:33:49 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x4600000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000004001e00fb034d564bf200000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x140]}) 03:33:49 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x88caffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x210, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x8000000000000000}]) 03:33:49 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r0 = socket(0x11, 0x100000803, 0x0) recvmsg(r0, &(0x7f0000003ac0)={&(0x7f00000037c0)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003840)=""/214, 0xd6}, {&(0x7f0000003940)=""/39, 0x27}], 0x2, &(0x7f00000039c0)=""/226, 0xe2, 0x7a}, 0x12040) bind$packet(r0, &(0x7f0000003b00)={0x11, 0x1f, r1, 0x1, 0x76b, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x5002}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x5d85a23cc16cc0e9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000340)=0x10001, 0x8) io_setup(0x469, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x800) io_submit(r3, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, r2, &(0x7f00000001c0)="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", 0x153, 0x8000000000000, 0x0, 0x0, r4}]) 03:33:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000180)={0x7e80000000000000, 0x7002, 0x7f, 0x9, 0x15}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b8010000000f01d92e0f50d96767660f388027360f01c80f20c035000000200f22c0b8010000000f01d9f20f38f136b864d700000f23d00f21f8351000000c0f23f866660f3882780066b846000f00d8", 0x50}], 0x1, 0x1, &(0x7f0000000140)=[@cstype0={0x4, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x8e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:49 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x81ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 481.312321] FAT-fs (loop2): Directory bread(block 128) failed [ 481.344505] FAT-fs (loop2): Directory bread(block 129) failed 03:33:49 executing program 3: r0 = socket$inet6(0xa, 0x804, 0x6) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0xccc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}}, 0x84) [ 481.372065] FAT-fs (loop2): Directory bread(block 130) failed [ 481.394897] FAT-fs (loop2): Directory bread(block 131) failed 03:33:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r2, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x8004745a, &(0x7f0000000000)) [ 481.431289] FAT-fs (loop2): Directory bread(block 132) failed [ 481.457975] FAT-fs (loop2): Directory bread(block 133) failed [ 481.478734] FAT-fs (loop2): Directory bread(block 134) failed 03:33:49 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8100000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x130, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 481.513403] FAT-fs (loop2): Directory bread(block 135) failed [ 481.540772] FAT-fs (loop2): Directory bread(block 136) failed [ 481.569254] FAT-fs (loop2): Directory bread(block 137) failed [ 481.612637] attempt to access beyond end of device [ 481.617686] loop2: rw=2049, want=311, limit=128 03:33:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x19c, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:50 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x6c000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:50 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev, @in=@rand_addr}}, {{@in6=@ipv4={[], [], @local}}}}, &(0x7f00000000c0)=0xe8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES64=r0, @ANYPTR64, @ANYRES64=r1, @ANYRES16=r1, @ANYRES16=r0, @ANYRES32=r1, @ANYRES16, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYPTR, @ANYBLOB="f186b97727d80a3a2a1291e66594b339fc407394b75cf9ec9121d61bbf2393b02899169224e28b16a75496a9254d0778417d537443bbae388b0998a7f04c2de75ca39e9a6660d3840231e4bda2648eb9aadb9d400677077abfb0e69277d0db78dd0e9e04ddbaad83d05c52660483af279dcd1df4", @ANYRES64=r1, @ANYPTR64], @ANYRES16=0x0, @ANYBLOB="e525005e0ce72d90a472ad6b79b90d66d00bc3a2b91ebe7d2b1933048dddae4ce7421a8bd6070415125f55b71396697f1bcd80cfed31f7813f3930f778a6c0c3e0b58681c1f4048bc4b6a567a31d25de6821df03873092aa1838367a817bb64fb88a13b6b1cede4de69ac015662a10cf3f23f24c421ef476769d27f2b93bcc3314f3aba983b9c40c90bd8d23073b2e333ef7436d9cdcb7a81ef14592d24ff392a42c27d929693c725c81cbcbadc3948f3bddbd0da71c9aeebb29d18b0f8827389522a21c9049643a90a96d1a87e9b89e725f38a89dcf64047293a8f7f41bea87672fc13a8e6e2d5ef8c08891bfa6dc2b", @ANYRES64=0x0, @ANYRES32, @ANYRES16, @ANYRES64=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYPTR, @ANYPTR, @ANYRES16=r1]]], &(0x7f0000000340)=0x9) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x800800000000}]) 03:33:50 executing program 3: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) setreuid(r0, r1) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000246487402e5286dd6006f52600303afffe00000000de76b4f9113b9cd39500000000000000000000ffff1e00000000000000000000000000018600907800000000600a07ec00000000fe8000000000000000000000000000ff00000000000000000002ffffac140000e2552bcb1b65ed19235d2dbbdcdd9ef3f874b103cabfeee8000000000000"], &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0xa00]}) 03:33:50 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xf0ffffffffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x98010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5423, &(0x7f0000000080)={0x1b}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 03:33:50 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af21, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000040)=""/59, &(0x7f00000003c0)=""/193, &(0x7f0000000200)=""/163}) [ 481.954605] FAT-fs (loop2): Directory bread(block 128) failed [ 481.993181] FAT-fs (loop2): Directory bread(block 129) failed 03:33:50 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x1000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1c7, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa8020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) r2 = socket$inet6(0xa, 0x1, 0x0) poll(&(0x7f0000000200)=[{r1}, {r2}], 0x2, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfdfd, &(0x7f00000000c0)="ac"}) [ 482.005321] FAT-fs (loop2): Directory bread(block 130) failed [ 482.044208] FAT-fs (loop2): Directory bread(block 131) failed [ 482.087873] FAT-fs (loop2): Directory bread(block 132) failed [ 482.113420] FAT-fs (loop2): Directory bread(block 133) failed 03:33:50 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x80350000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x16f, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:50 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00080000fe80000000000000000000000000000000000000aa"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff00000000000000000000000000000000000002"]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x200) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffff}, 0x3, {0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x7fff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) [ 482.136242] FAT-fs (loop2): Directory bread(block 134) failed [ 482.145545] binder: 7449:7450 ioctl c0306201 20000180 returned -11 [ 482.170931] FAT-fs (loop2): Directory bread(block 135) failed [ 482.187437] FAT-fs (loop2): Directory bread(block 136) failed [ 482.217176] FAT-fs (loop2): Directory bread(block 137) failed [ 482.263188] binder: send failed reply for transaction 66 to 7449:7450 [ 482.273150] binder: undelivered TRANSACTION_COMPLETE [ 482.278349] binder: undelivered TRANSACTION_ERROR: 29189 [ 482.285556] attempt to access beyond end of device [ 482.290587] loop2: rw=2049, want=311, limit=128 03:33:50 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x8}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:50 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000140)=@ioapic) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000001, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r0, r2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000001580)=""/193, 0xc1}, {&(0x7f0000001680)=""/219, 0xdb}, {&(0x7f0000000480)=""/5, 0x5}, {&(0x7f00000004c0)=""/40, 0x28}], 0x6, &(0x7f0000001800)=""/215, 0xd7, 0xfffffffffffffffd}}, {{&(0x7f0000001900)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001980)=""/58, 0x3a}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/86, 0x56}, {&(0x7f0000002a40)=""/10, 0xa}, {&(0x7f0000002a80)=""/190, 0xbe}, {&(0x7f0000002b40)=""/107, 0x6b}, {&(0x7f0000002bc0)=""/199, 0xc7}, {&(0x7f0000002cc0)=""/195, 0xc3}], 0x8, &(0x7f0000002e40)=""/20, 0x14, 0x4}, 0xfffffffffffffffb}, {{&(0x7f0000002e80)=@in, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f00)=""/151, 0x97}, {&(0x7f0000002fc0)=""/15, 0xf}], 0x2, &(0x7f0000003040)=""/51, 0x33, 0xbad}, 0x8001}, {{&(0x7f0000003080), 0x80, &(0x7f00000033c0)=[{&(0x7f0000003100)=""/188, 0xbc}, {&(0x7f00000031c0)=""/146, 0x92}, {&(0x7f0000003280)=""/102, 0x66}, {&(0x7f0000003300)=""/135, 0x87}], 0x4, &(0x7f0000003400)=""/225, 0xe1, 0x1}, 0x4}, {{&(0x7f0000003500)=@nfc, 0x80, &(0x7f0000003680)=[{&(0x7f0000003580)=""/230, 0xe6}], 0x1, 0x0, 0x0, 0x5}, 0x1}, {{&(0x7f00000036c0)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003740)=""/187, 0xbb}, {&(0x7f0000003800)=""/189, 0xbd}], 0x2, &(0x7f0000003900)=""/82, 0x52, 0x80000001}, 0x9}], 0x6, 0x1, &(0x7f0000003b00)={0x77359400}) select(0x40, &(0x7f0000000080)={0xf9db, 0x743, 0x6d2, 0xe7700000000, 0x0, 0x9, 0x10001, 0x7}, &(0x7f0000000240)={0x401, 0x0, 0x8, 0x401, 0x4800000000000, 0x0, 0x800, 0x5}, &(0x7f00000002c0)={0x2, 0x101, 0x8, 0x600000000000, 0x7ff, 0xcc, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x2710}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000003b40)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000003b80)=0x1c) socket$kcm(0x29, 0x7, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x9) 03:33:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x139, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:50 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fff, 0x180) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) 03:33:50 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x89060000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:50 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x0, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r0, &(0x7f0000000000)=[{0x4, 0x9, 0x800}, {0x0, 0x4, 0x800}, {0x7, 0x100000001, 0x1000}, {0x4, 0x5, 0x1800}, {0x2, 0x5, 0x1000}, {0x2, 0x51, 0x1800}, {0x7, 0x7fff, 0x800}], 0x2aaab101) semctl$IPC_RMID(r0, 0x0, 0x0) 03:33:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xffffffffffffffff}]) 03:33:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:50 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x83ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x9f, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001280)=""/178, 0xb2}], 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socketpair(0x2, 0xa, 0xfff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000280)=""/104, &(0x7f0000000300)=0x68) pread64(r4, &(0x7f00000000c0)=""/34, 0x15c, 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000240)={'\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}) getpeername(r5, &(0x7f0000000340)=@generic, &(0x7f00000003c0)=0x80) [ 482.588209] FAT-fs (loop2): Directory bread(block 128) failed [ 482.609632] FAT-fs (loop2): Directory bread(block 129) failed [ 482.622937] FAT-fs (loop2): Directory bread(block 130) failed 03:33:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:50 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") rt_sigpending(&(0x7f0000000000), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 482.654526] FAT-fs (loop2): Directory bread(block 131) failed [ 482.686284] FAT-fs (loop2): Directory bread(block 132) failed 03:33:51 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x3c00], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 482.722300] FAT-fs (loop2): Directory bread(block 133) failed 03:33:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf0ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x10e, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 482.766228] FAT-fs (loop2): Directory bread(block 134) failed [ 482.773646] FAT-fs (loop2): Directory bread(block 135) failed [ 482.826667] FAT-fs (loop2): Directory bread(block 136) failed [ 482.857444] FAT-fs (loop2): Directory bread(block 137) failed [ 482.899086] attempt to access beyond end of device [ 482.904164] loop2: rw=2049, want=311, limit=128 03:33:51 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x3}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:51 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x2], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x15a, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xfffffff4}]) 03:33:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 483.129465] FAT-fs (loop2): Directory bread(block 128) failed [ 483.150716] FAT-fs (loop2): Directory bread(block 129) failed [ 483.164834] FAT-fs (loop2): Directory bread(block 130) failed [ 483.171014] FAT-fs (loop2): Directory bread(block 131) failed [ 483.177701] FAT-fs (loop2): Directory bread(block 132) failed [ 483.187053] FAT-fs (loop2): Directory bread(block 133) failed [ 483.193274] FAT-fs (loop2): Directory bread(block 134) failed [ 483.199803] FAT-fs (loop2): Directory bread(block 135) failed [ 483.205983] FAT-fs (loop2): Directory bread(block 136) failed [ 483.213333] FAT-fs (loop2): Directory bread(block 137) failed [ 483.243269] attempt to access beyond end of device [ 483.248314] loop2: rw=2049, want=311, limit=128 03:33:51 executing program 3: 03:33:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000040)}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:51 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x3300000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x114, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x134, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xfbffffff00000000}]) 03:33:52 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xf5ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xb802000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:52 executing program 3: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x3) shutdown(r0, 0x100000000001) 03:33:52 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r3}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r5, 0xfffffffffffffffb, 0x2, r3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x14) 03:33:52 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xc0ffffff}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x1f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:52 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8847000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x4f, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 483.906304] FAT-fs (loop2): Directory bread(block 128) failed [ 483.933500] irq bypass consumer (token 000000003ad4256b) registration fails: -16 [ 483.939658] FAT-fs (loop2): Directory bread(block 129) failed 03:33:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9effffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 484.003729] FAT-fs (loop2): Directory bread(block 130) failed [ 484.035465] FAT-fs (loop2): Directory bread(block 131) failed 03:33:52 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@dos1xfloppy='dos1xfloppy', 0x2c}, {@uid={'uid', 0x3d}, 0x2c}, {@debug='debug', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@debug='debug', 0x2c}, {@showexec='showexec', 0x2c}, {@discard='discard', 0x2c}, {@check_strict='check=strict', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mknod(&(0x7f00000002c0)='./file0/file.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0/file.\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000140)={0x20, 0xda17}) 03:33:52 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x200000000000f, 0x4, 0x2000000}, 0x2c) socket$netlink(0x10, 0x3, 0x4) 03:33:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1fd, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 484.070900] FAT-fs (loop2): Directory bread(block 132) failed [ 484.103692] FAT-fs (loop2): Directory bread(block 133) failed [ 484.156783] FAT-fs (loop2): Directory bread(block 134) failed [ 484.162448] FAT-fs (loop3): Unrecognized mount option "uid=" or missing value 03:33:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x14a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 484.206766] FAT-fs (loop2): Directory bread(block 135) failed [ 484.240163] FAT-fs (loop2): Directory bread(block 136) failed [ 484.276442] FAT-fs (loop2): Directory bread(block 137) failed [ 484.328979] attempt to access beyond end of device [ 484.334068] loop2: rw=2049, want=311, limit=128 03:33:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x100000000000000}]) 03:33:52 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xe80], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') read(r0, &(0x7f0000000180)=""/230, 0xffffffffffffff03) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x3f, 0x0, 0x80, 0x2, 0xcbbc, 0xfffffffffffffffb}) 03:33:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc7, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x4a) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x60000, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0x7f, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup3(r0, r0, 0x80000) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x00'}, &(0x7f00000001c0)='-em0trustedwlan1wlan1\x00', 0x16, 0x3) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000000)={r0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 484.524185] FAT-fs (loop2): Directory bread(block 128) failed [ 484.561875] FAT-fs (loop2): Directory bread(block 129) failed [ 484.588175] FAT-fs (loop2): Directory bread(block 130) failed [ 484.594301] FAT-fs (loop2): Directory bread(block 131) failed [ 484.601783] FAT-fs (loop2): Directory bread(block 132) failed [ 484.607861] FAT-fs (loop2): Directory bread(block 133) failed [ 484.618467] FAT-fs (loop2): Directory bread(block 134) failed [ 484.631936] FAT-fs (loop2): Directory bread(block 135) failed [ 484.638435] FAT-fs (loop2): Directory bread(block 136) failed [ 484.644500] FAT-fs (loop2): Directory bread(block 137) failed [ 484.670165] attempt to access beyond end of device [ 484.675186] loop2: rw=2049, want=311, limit=128 03:33:53 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x6c00000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:53 executing program 3: arch_prctl(0x1001, &(0x7f0000000180)="b42f37e51e4a7838e753faa48c2532acd58d0c936856d3733b904815a8bd5fea3452d1bb56daba") r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x90) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000080)="7b3336c6e1e9b934eba0493e90d2b54ce4685f32402afb6d6d6e3115ad1945f52a3786c0317d003c02e5d7274d1e4e1a65e932758b601f710196d68e712167564c7e8766d683e48ab683fd2c103ee7a165ca57d30603b4ab7a2d510efba47885b95ba7ce52d2273f3f51b5220df5a406f8b52f4312ae06eaaf886430f9505329631b") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @multicast1=0xe0000001}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 'syzkaller0\x00'}) 03:33:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xd8, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:53 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8dffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:53 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x38, 0x1a06b18e29a2938d, 0x70bd2a, 0x25dfdbfe, {}, [@typed={0x14, 0x2b, @str='/dev/snapshot\x00'}, @generic="e2816b0e2eeb46a51037c9175185ccf8d1e6e93d76c9"]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffff9c, 0x0, [0xa]}, 0x2c) 03:33:53 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x1000, 0x2000, &(0x7f0000003000/0x2000)=nil}) fchmod(r3, 0x40) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:33:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x61000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xf4ffffff00000000}]) 03:33:53 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x58000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x56, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x0, 0x4}, 0x2c) socketpair$inet6(0xa, 0x8080a, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x40000000000000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000340)=""/230, 0xd000}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000002c0)}, 0x10) 03:33:53 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x41) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x12) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000080)) ioctl(r0, 0x4000008912, &(0x7f0000000300)="29d7e1311f160577651070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, &(0x7f0000000180)="63e6ac8205fda17de60827afd235004235c2f6a07b0a0fc087b71f5c4b6ed369c0073d68470fe76a4bab870fd06236b017c27e5b61b02e4908e0921beb04ea2c6d49cc24880c012a40b3a2a6a5fc3cdbe0c3691e11a72638e13bccd432054c19ee92c48a989ba6c89c172f4f3e86f4a10d6423985370258f60e13d74fb6479063886c9a600888b69c8148425ef4d8b6842086847f98f49206d6b0736e71e584da1e02eb8a77b2561e8136847", 0xffffffffffffff24, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r3, 0xc00, 0x70bd2d, 0x25dfdbff, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x20000000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000000c0)=""/169, &(0x7f0000000080)=0xa9) [ 484.887569] FAT-fs (loop2): Directory bread(block 128) failed [ 484.933145] FAT-fs (loop2): Directory bread(block 129) failed 03:33:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:53 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x700], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x165, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) [ 484.976461] FAT-fs (loop2): Directory bread(block 130) failed [ 485.000236] FAT-fs (loop2): Directory bread(block 131) failed [ 485.025144] FAT-fs (loop2): Directory bread(block 132) failed [ 485.089957] FAT-fs (loop2): Directory bread(block 133) failed [ 485.138146] FAT-fs (loop2): Directory bread(block 134) failed [ 485.150690] FAT-fs (loop2): Directory bread(block 135) failed [ 485.156908] FAT-fs (loop2): Directory bread(block 136) failed [ 485.168121] FAT-fs (loop2): Directory bread(block 137) failed [ 485.209860] attempt to access beyond end of device [ 485.214944] loop2: rw=2049, want=311, limit=128 03:33:53 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x4000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:53 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000040)={0x1fc00fbd, 0x0, 0xd09f, 0x5, 0x1f, 0x800}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r0) 03:33:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:53 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xff000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x10b, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:53 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000001000/0x1000)=nil, 0x1000}) syncfs(r0) r1 = socket$pptp(0x18, 0x1, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000005000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000005000)={&(0x7f0000000000/0x3000)=nil, 0x3000}) 03:33:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x4}]) 03:33:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x149, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 03:33:53 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8004000008912, &(0x7f0000000080)="295ee1311f16f477671070") mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) close(r0) 03:33:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:53 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff83], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:53 executing program 3: unshare(0x64000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x429e, 0x40000) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) [ 485.484679] FAT-fs (loop2): Directory bread(block 128) failed [ 485.534287] FAT-fs (loop2): Directory bread(block 129) failed 03:33:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:53 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8cffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x20000000}}], 0x400000000000284, 0x20004bc0) [ 485.584292] FAT-fs (loop2): Directory bread(block 130) failed [ 485.609480] IPVS: ftp: loaded support on port[0] = 21 [ 485.624188] FAT-fs (loop2): Directory bread(block 131) failed [ 485.648331] FAT-fs (loop2): Directory bread(block 132) failed [ 485.659631] FAT-fs (loop2): Directory bread(block 133) failed [ 485.672599] FAT-fs (loop2): Directory bread(block 134) failed [ 485.706746] FAT-fs (loop2): Directory bread(block 135) failed [ 485.721012] FAT-fs (loop2): Directory bread(block 136) failed [ 485.739884] FAT-fs (loop2): Directory bread(block 137) failed [ 485.779225] attempt to access beyond end of device [ 485.784305] loop2: rw=2049, want=311, limit=128 03:33:54 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xffffff7f}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:54 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x883e, 0x8}}}}}}, &(0x7f0000000080)={0x0, 0x4, [0x0, 0xe2a]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000008002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = accept4(r0, &(0x7f0000000080)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2}, @in={0x2, 0x0, @dev={0xac, 0x14, 0xffffffffffffffff}}], 0x3a5) sigaltstack(&(0x7f0000001000/0x1000)=nil, 0x0) 03:33:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x500}}], 0x400000000000284, 0x20004bc0) 03:33:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xffff000000000000}]) 03:33:54 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x800000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x6801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:54 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x600000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:54 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000240)={0x2d3}, 0x4) 03:33:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x600000000000000}}], 0x400000000000284, 0x20004bc0) [ 486.091543] FAT-fs (loop2): Directory bread(block 128) failed [ 486.126215] FAT-fs (loop2): Directory bread(block 129) failed 03:33:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8201, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x4010, 0x4) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000001091f001cfffd946fa2830020200a000900020001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 486.163742] FAT-fs (loop2): Directory bread(block 130) failed [ 486.206220] FAT-fs (loop2): Directory bread(block 131) failed [ 486.231817] FAT-fs (loop2): Directory bread(block 132) failed 03:33:54 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xd], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0xc0) r1 = accept$alg(r0, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f920eb2d1b227ad12d77403619ef5b31f5a0e0000d53adb66bf773001b3e83b"], 0x10) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5) [ 486.252832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 486.256764] FAT-fs (loop2): Directory bread(block 133) failed [ 486.294114] FAT-fs (loop2): Directory bread(block 134) failed 03:33:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x4002000000000000}}], 0x400000000000284, 0x20004bc0) [ 486.304948] netlink: 5 bytes leftover after parsing attributes in process `syz-executor3'. [ 486.314659] FAT-fs (loop2): Directory bread(block 135) failed 03:33:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x3}}], 0x400000000000284, 0x20004bc0) [ 486.352903] FAT-fs (loop2): Directory bread(block 136) failed [ 486.353136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 486.380750] FAT-fs (loop2): Directory bread(block 137) failed [ 486.384477] netlink: 5 bytes leftover after parsing attributes in process `syz-executor3'. [ 486.431246] attempt to access beyond end of device [ 486.436323] loop2: rw=2049, want=311, limit=128 03:33:54 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x8000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:55 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="90a9fbef3e36d53a291b51feb0b36eaddf66eea438d13cb5d55fb6190d0a384b5a6883d35ee49adc3a2695f16c9d65dde2f9a2a7e676257101ba2085359e0dcade14bc48705afc22989cd1"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='/\x00', 0x0, 0x0, &(0x7f0000000200), 0x8060, &(0x7f00000001c0)=ANY=[@ANYBLOB='auto_da_alloc=7']) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000) read(r0, &(0x7f0000000040)=""/74, 0x4a) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 03:33:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xf8fa7b12}}], 0x400000000000284, 0x20004bc0) 03:33:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) r1 = dup3(r0, r0, 0x80000) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000240)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000280)={r2, 0x1, 0x6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/230}, 0x18) 03:33:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x400000000000000}]) 03:33:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:55 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa102000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:55 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x81ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x2000000}}], 0x400000000000284, 0x20004bc0) 03:33:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f660070") rmdir(&(0x7f0000000000)='./file0\x00') r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2100040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbfb, {0x7}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$inet_int(r1, 0x10d, 0xa, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) [ 486.859293] FAT-fs (loop2): Directory bread(block 128) failed [ 486.881636] FAT-fs (loop2): Directory bread(block 129) failed [ 486.900112] FAT-fs (loop2): Directory bread(block 130) failed 03:33:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 486.931706] FAT-fs (loop2): Directory bread(block 131) failed [ 486.962310] FAT-fs (loop2): Directory bread(block 132) failed 03:33:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x4000000000000}}], 0x400000000000284, 0x20004bc0) [ 486.992134] FAT-fs (loop2): Directory bread(block 133) failed [ 487.012254] FAT-fs (loop2): Directory bread(block 134) failed [ 487.033581] FAT-fs (loop2): Directory bread(block 135) failed 03:33:55 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x88470000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 487.050879] FAT-fs (loop2): Directory bread(block 136) failed [ 487.060770] EXT4-fs (sda1): re-mounted. Opts: auto_da_alloc=7,errors=continue [ 487.070288] FAT-fs (loop2): Directory bread(block 137) failed 03:33:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x100000000000000}}], 0x400000000000284, 0x20004bc0) [ 487.121546] attempt to access beyond end of device [ 487.126611] loop2: rw=2049, want=311, limit=128 03:33:55 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xff000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:55 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x119000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) sendto$inet6(r1, &(0x7f0000000000)="e2", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3fff, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) listen(r1, 0xffffffffffffff7f) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8) accept(r1, &(0x7f00000000c0)=@can, &(0x7f0000000080)=0xffffffff0000001c) 03:33:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xfbffffff}]) 03:33:56 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x689], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xe8edff7f00000000}}], 0x400000000000284, 0x20004bc0) 03:33:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x526, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x3d, 0x1, @thr={&(0x7f00000000c0)="3ac3c96522cd85db33615e96758e1b87f246ebda99cd22d6e1647f03e76fe7ea4d63e232df761489c9e9ccb0be6b8fb3e0d799f127f8c2dbf90d47e9cd577febdb42a72c433353a8b3ccc99c8b2ffaa806e016130955cee1d62286d9a1f13dd7c215e91ee479014cc6", &(0x7f0000000140)="532c88bd7e0e801d209ca45e6047bb3e77ae88d27e2a3775bead2653f969bdd533369e16831baef508092a9d1e717e09d6284770b036cd684be2c8314ef81a1133aef9d317ec3b44766711c69c758333f32b4d95e631053b65a874e54cbffeb13730c5f027483bb4c23ad520c5895927872232daec9ff9260c4d7da491712669418b9cbc0fff"}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f0000000280)) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x100, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x19, 0x14, "488ac5ecdb8c7f503bcff389d376d1589262666ab2159873923c4fea48e285208de9d7a70e626fa81fd763579ebf587d988d90c224f9b52452b995f07559a0af", "6eca9ac4e2d161c3fa83bcfe7c1a195beaf5008422f234d73b16aaae5093b802", [0x6644, 0xfffffffffffffffa]}) recvmmsg(r0, &(0x7f0000002880), 0x400000000000087, 0x400000040000002, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 03:33:56 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400c0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:56 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x2}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x91030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="2957e1311f160677671070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='maps\x00') socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x2, 0xc2d, 0xffffffffffffff00, 0x81}, 0x6) preadv(r1, &(0x7f00000014c0)=[{&(0x7f00000013c0)=""/208, 0xd0}], 0x1, 0x0) [ 487.975397] FAT-fs (loop2): Directory bread(block 128) failed [ 488.007499] FAT-fs (loop2): Directory bread(block 129) failed 03:33:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xffffff7f}}], 0x400000000000284, 0x20004bc0) 03:33:56 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x300000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 488.034995] FAT-fs (loop2): Directory bread(block 130) failed 03:33:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 488.094106] FAT-fs (loop2): Directory bread(block 131) failed 03:33:56 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x806000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 488.138764] FAT-fs (loop2): Directory bread(block 132) failed [ 488.148898] FAT-fs (loop2): Directory bread(block 133) failed [ 488.155243] FAT-fs (loop2): Directory bread(block 134) failed [ 488.165200] FAT-fs (loop2): Directory bread(block 135) failed 03:33:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x40000}}], 0x400000000000284, 0x20004bc0) 03:33:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3ff, r0, &(0x7f0000000240)="560032c4e41c29fbc9d61d9a0f5e7d42cfbb3aea630e6eabe0268e8b6bdacb3c0e6967a402ba760ec76005df195c05f219ddfc2695ebb942772f3463a78e84e551947810ca7f1456bbd4fcf0f8043eb44654982f97874c85113b749bfe9a815a380abe84b64dd9c73e64d9c05d17264d73bd0075f74a14c3ca47256b84dbb1eee98b594abf896fd73e8309c9cad6c8b43492bc41c2bba972d5bfcb70dfbd85c254102e34a209d51bba391796313923d900e3606d9eaf44cdf9fc17244bba32c83026446c7db42bc56e55b16506b1d408", 0xd0, 0x1000, 0x0, 0x1, r0}, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)=0x10003) [ 488.185789] FAT-fs (loop2): Directory bread(block 136) failed [ 488.207257] FAT-fs (loop2): Directory bread(block 137) failed 03:33:56 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x88480000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 488.274065] attempt to access beyond end of device [ 488.279131] loop2: rw=2049, want=311, limit=128 03:33:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x8800000}]) 03:33:56 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x5000000000000}}], 0x400000000000284, 0x20004bc0) 03:33:56 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000100)={0x6, 0x7, 0xff, 0x0, 'syz0\x00', 0xffff}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000400)="295ee1311f16f477671070") symlink(&(0x7f0000000080)='/\x00', &(0x7f0000000040)='./file0\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000000c0)=0x1) chdir(&(0x7f0000000540)='./file0\x00') getcwd(&(0x7f00000003c0)=""/126, 0x7e) [ 488.530425] FAT-fs (loop2): Directory bread(block 128) failed [ 488.561902] FAT-fs (loop2): Directory bread(block 129) failed [ 488.585964] FAT-fs (loop2): Directory bread(block 130) failed [ 488.600096] FAT-fs (loop2): Directory bread(block 131) failed [ 488.614295] FAT-fs (loop2): Directory bread(block 132) failed [ 488.627299] FAT-fs (loop2): Directory bread(block 133) failed [ 488.641668] FAT-fs (loop2): Directory bread(block 134) failed [ 488.655538] FAT-fs (loop2): Directory bread(block 135) failed [ 488.670286] FAT-fs (loop2): Directory bread(block 136) failed [ 488.683147] FAT-fs (loop2): Directory bread(block 137) failed [ 488.710835] attempt to access beyond end of device [ 488.715885] loop2: rw=2049, want=311, limit=128 03:33:57 executing program 3: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00\b\x00') r2 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r2) r3 = socket$kcm(0x29, 0x2, 0x0) prctl$getname(0x10, &(0x7f0000000000)=""/87) write$binfmt_elf32(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46000000000000000000eec5bc00a82f0000000000000000004b00000000200000000000000000200000000000000000000000000000dc0000000000000000000000000000000000"], 0x58) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000400)={'broute\x00', 0x0, 0x3, 0x1e, [], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000200)=""/30}, &(0x7f0000000240)=0x78) readv(r1, &(0x7f0000001680)=[{&(0x7f0000000100)=""/212, 0x200001d4}, {&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x4) 03:33:57 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x200000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xf0ffffff7f0000}}], 0x400000000000284, 0x20004bc0) 03:33:57 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xff00000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x7fffffffffffffff}]) 03:33:57 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ed277a4200100360070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000000)=""/195}, 0x16) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000080)={@loopback=0x7f000001, @rand_addr, r2}, 0xc) r3 = socket$inet6(0xa, 0x100000002, 0x0) sendto$inet6(r3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 03:33:57 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x700000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xc04b002000000000}}], 0x400000000000284, 0x20004bc0) 03:33:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2f03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:57 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x88640000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:57 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x101, 0x8000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl(r1, 0xc0184908, &(0x7f0000000080)) [ 489.032344] FAT-fs (loop2): Directory bread(block 128) failed 03:33:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xb802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 489.082147] FAT-fs (loop2): Directory bread(block 129) failed [ 489.125152] FAT-fs (loop2): Directory bread(block 130) failed 03:33:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="e1dc615500"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000980)={0x87e, 0x0, {0xffffffffffffffff, 0x2, 0x8000}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, r2, 0x2}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x20}, 0x1}, 0x0) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f00000007c0)=""/222, 0xde}], 0xa, 0x0) 03:33:57 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8906], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x1000000}}], 0x400000000000284, 0x20004bc0) 03:33:57 executing program 3: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x8000000000005452, &(0x7f0000000080)=0x3c) fcntl$setsig(r1, 0xa, 0x12) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffff001}, &(0x7f0000000300), 0x8) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x8000000016) [ 489.167961] FAT-fs (loop2): Directory bread(block 131) failed [ 489.203128] FAT-fs (loop2): Directory bread(block 132) failed [ 489.210370] FAT-fs (loop2): Directory bread(block 133) failed [ 489.244114] FAT-fs (loop2): Directory bread(block 134) failed [ 489.261151] FAT-fs (loop2): Directory bread(block 135) failed 03:33:57 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xf5ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 489.316446] FAT-fs (loop2): Directory bread(block 136) failed [ 489.335327] FAT-fs (loop2): Directory bread(block 137) failed [ 489.382697] attempt to access beyond end of device [ 489.387764] loop2: rw=2049, want=311, limit=128 03:33:57 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x80ffffff00000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xff0f}}], 0x400000000000284, 0x20004bc0) 03:33:57 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x2000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xfffffffb}]) 03:33:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9effffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000840000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioprio_set$pid(0x3, r0, 0x8000) munlockall() 03:33:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x2000000000000000}}], 0x400000000000284, 0x20004bc0) 03:33:58 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xd000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 489.698603] FAT-fs (loop2): Directory bread(block 128) failed [ 489.735810] FAT-fs (loop2): Directory bread(block 129) failed 03:33:58 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, @link_local={0x1, 0x80, 0xc2}, @dev={0xac, 0x14, 0x14}}}}}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='comm\x00') ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x394, 0x0, 0x8}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r2, 0x1, 0x1ff, 0x8f3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xd6d, @loopback={0x0, 0x1}, 0x445}}, [0x100, 0x800, 0x7ff, 0x7, 0xffffffffffff00bb, 0x7ff, 0x2, 0x0, 0x1, 0x9, 0x35, 0xa0f1, 0x3f, 0x4, 0xfffffffffffffff8]}, &(0x7f0000000200)=0x100) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, &(0x7f0000000180)) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x80000001) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r3, 0xfffffffffffffff9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r5, 0x7, 0x30}, &(0x7f0000000300)=0xc) [ 489.783147] FAT-fs (loop2): Directory bread(block 130) failed [ 489.817431] FAT-fs (loop2): Directory bread(block 131) failed [ 489.842497] FAT-fs (loop2): Directory bread(block 132) failed [ 489.877337] FAT-fs (loop2): Directory bread(block 133) failed [ 489.884469] FAT-fs (loop2): Directory bread(block 134) failed 03:33:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="600000ff96653456894c76018f09ef6a55f8056ac402b3709c933b1a70b5e647e3a4ed51554e9f99b01a43"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="cc292f4b8879c614e45de1683a4e6543800b2c564b63ff319ecb3e03166557535c93f9d544af1a08f823610c57d66328f87a3526991e933a08a90ff83182eeaa6a0b73a8911ebad083c43e02e367400e3bcd68691c94cb4c9d49fd10f27e5ea0e48c1cdf864242fe39403cd7747f642e624f69657ff02db54d89608b4c2408870841bad7ba1fda7db93a", 0x8a}, {&(0x7f0000000080)="b32801166217b6e726729d870eb33c3d9145bb7233d0502a0460c7eee22c2fe2bf5c5c365a6fe2bcf538c66c14807d0127587387ed2e9b30193442152f29bfb8b2e82897631e7e0fb4431378b8a967346e0ddaf3eb56a2a57ba94d60ce64d530ff354bf21c61fc53f1a1f078bd11d0bd51173d1fc6419d93af48e1c97b", 0x7d}, {&(0x7f0000000200)="3303de3f0d293919e7bf949c3020c714b59dda1577e4bba4fa7962f1fba63988ebbd2e49a31f6df2f8621bba5f3e009198e3e3f79428af302019c31c973b9e72d4391cef66323486781f17277592052cbfa6ccf269eb6c", 0x57}], 0x4, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x4a010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:58 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x2800], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x2783}}], 0x400000000000284, 0x20004bc0) [ 489.890936] FAT-fs (loop2): Directory bread(block 135) failed [ 489.897291] FAT-fs (loop2): Directory bread(block 136) failed [ 489.905374] FAT-fs (loop2): Directory bread(block 137) failed [ 489.961990] attempt to access beyond end of device [ 489.967179] loop2: rw=2049, want=311, limit=128 03:33:58 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8014000000000083) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x2) sendto$inet6(r1, &(0x7f0000000080)="ba", 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x1000000005a7) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa00000, 0x0, 0x663}, 0xb) 03:33:58 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x6488], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xff0f000000000000}}], 0x400000000000284, 0x20004bc0) 03:33:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0xffff0000}]) 03:33:58 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xffffff80}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8000000000005) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x1000000000000259) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x300000000000000}}], 0x400000000000284, 0x20004bc0) 03:33:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x1020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:58 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8848000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 490.466123] FAT-fs (loop2): Directory bread(block 128) failed [ 490.493523] FAT-fs (loop2): Directory bread(block 129) failed [ 490.502121] FAT-fs (loop2): Directory bread(block 130) failed [ 490.525233] FAT-fs (loop2): Directory bread(block 131) failed 03:33:58 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8906000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 490.592421] FAT-fs (loop2): Directory bread(block 132) failed [ 490.629244] FAT-fs (loop2): Directory bread(block 133) failed [ 490.639453] FAT-fs (loop2): Directory bread(block 134) failed [ 490.645735] FAT-fs (loop2): Directory bread(block 135) failed [ 490.659952] FAT-fs (loop2): Directory bread(block 136) failed [ 490.697963] FAT-fs (loop2): Directory bread(block 137) failed [ 490.730323] attempt to access beyond end of device [ 490.735389] loop2: rw=2049, want=311, limit=128 03:33:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000100)="6465260f6f4f79440f20c0350b000000440f22c00f01df0f01ca0f01c9cbc4e33578a500000080000f0766baf80cb834386785ef66bafc0c66ed660f3880a195200000", 0x43}], 0x1, 0xffffff7ffffffffd, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x4a01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x2}}], 0x400000000000284, 0x20004bc0) 03:33:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:59 executing program 3: acct(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x3}, [{0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) sendfile(r1, r1, &(0x7f0000000080), 0xfba) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 03:33:59 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x8008}]) 03:33:59 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x8dffffff00000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:33:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x50000}}], 0x400000000000284, 0x20004bc0) 03:33:59 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff81], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 491.030797] FAT-fs (loop2): Directory bread(block 128) failed [ 491.043856] FAT-fs (loop2): Directory bread(block 129) failed [ 491.077431] FAT-fs (loop2): Directory bread(block 130) failed [ 491.108217] FAT-fs (loop2): Directory bread(block 131) failed 03:33:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x6100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:33:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x7000000}}], 0x400000000000284, 0x20004bc0) [ 491.168128] FAT-fs (loop2): Directory bread(block 132) failed 03:33:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xb499, 0x0, 0x5, 0x5, 0x8, 0x7fff, 0x8d, 0x4, 0xfffffffffffffffe, 0x1, 0x6538, 0x401}) ioctl(r0, 0x8912, &(0x7f0000000000)="6ce27b78c5aa0047fc2f07") getrusage(0x1, &(0x7f0000000180)) 03:33:59 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xd00000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 491.217205] FAT-fs (loop2): Directory bread(block 133) failed [ 491.253423] FAT-fs (loop2): Directory bread(block 134) failed 03:33:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000)=[@cstype0={0x4, 0xe}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) fsetxattr(r0, &(0x7f00000002c0)=@random={'user.', '/dev/ppp\x00'}, &(0x7f0000000300)='/dev/ppp\x00', 0x9, 0x1) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)}, 0x0) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r4) 03:33:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x1802}}], 0x400000000000284, 0x20004bc0) [ 491.294322] FAT-fs (loop2): Directory bread(block 135) failed [ 491.322284] FAT-fs (loop2): Directory bread(block 136) failed [ 491.336574] FAT-fs (loop2): Directory bread(block 137) failed 03:33:59 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x800e0000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 491.392478] attempt to access beyond end of device [ 491.397540] loop2: rw=2049, want=311, limit=128 03:33:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x6}}], 0x400000000000284, 0x20004bc0) 03:33:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) fstatfs(r1, &(0x7f00000000c0)=""/239) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x1000) 03:33:59 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xf0ffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:33:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x800800000000}]) [ 491.662526] FAT-fs (loop2): Directory bread(block 128) failed [ 491.686846] FAT-fs (loop2): Directory bread(block 129) failed [ 491.700230] FAT-fs (loop2): Directory bread(block 130) failed 03:34:00 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x4600}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:00 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x2, 'lblc\x00'}, 0x2c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket(0xa, 0x3, 0x3) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000140)="70e940eca509c1e351db5474dc08b03910cd3621a92ee5e17929f5c53de18eb3980de5e8cb582ec3f2e17de5168b6c6595854184d5a7809902d83b24116492a358e7e636b6bdad524699be9aa783022254f0e243dbe2723418162f562985ebe07e2c9020cc706d5b5a2f3836b96d4470e2bb4018142195d802b17125ca26adeb4ee46d644d030771fa6441fedeb5a214d512695cd2204b454fd369726ba89b72f7c99506aaa941708ed6931c51d08b7e93", 0xb1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0xfffffffffffffffd, 'nq\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 03:34:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x7ffffffff000}}], 0x400000000000284, 0x20004bc0) 03:34:00 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x5800000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 491.716213] FAT-fs (loop2): Directory bread(block 131) failed [ 491.725194] FAT-fs (loop2): Directory bread(block 132) failed [ 491.731402] FAT-fs (loop2): Directory bread(block 133) failed [ 491.739661] FAT-fs (loop2): Directory bread(block 134) failed [ 491.746375] FAT-fs (loop2): Directory bread(block 135) failed [ 491.752454] FAT-fs (loop2): Directory bread(block 136) failed [ 491.758609] FAT-fs (loop2): Directory bread(block 137) failed 03:34:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xd502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000040)=0x101000000000, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001800)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 491.814636] attempt to access beyond end of device [ 491.819673] loop2: rw=2049, want=291, limit=128 03:34:00 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8dffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x400000890e, &(0x7f0000000140)="295ee1c0024e6e01efd6c3a1ce1c6abb311f1635b2fd66110c7e7109d99eb3cc175e494f2a51490a436b59d0e89ba1bd98") mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 03:34:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x218200) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x100000}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x218}}], 0x400000000000284, 0x20004bc0) 03:34:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x100000000000000}]) 03:34:00 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") getpeername$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) sendmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x3, 0xd1b, 0x2, 0x10001}, 0x2, 0x1, 0x0, 0x0, "dee58de34b6fac46"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002800010000000000000000000100000008000000024100453ef896c122bb214a00"], 0x1c}, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r4, r4, 0x0) setuid(r4) setreuid(r4, 0x0) 03:34:00 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x4000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:00 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x4) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[]}, 0x1}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000001c0)) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x192, 0x28, 0x5, 0x0, 0x0, {0x1}}, 0x393}, 0x1}, 0x0) 03:34:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x900000000000000}}], 0x400000000000284, 0x20004bc0) [ 492.166962] FAT-fs (loop2): Directory bread(block 128) failed [ 492.202513] FAT-fs (loop2): Directory bread(block 129) failed [ 492.225945] FAT-fs (loop2): Directory bread(block 130) failed [ 492.250470] FAT-fs (loop2): Directory bread(block 131) failed [ 492.268672] FAT-fs (loop2): Directory bread(block 132) failed [ 492.277396] FAT-fs (loop2): Directory bread(block 133) failed [ 492.292145] FAT-fs (loop2): Directory bread(block 134) failed [ 492.305238] FAT-fs (loop2): Directory bread(block 135) failed [ 492.312747] FAT-fs (loop2): Directory bread(block 136) failed [ 492.318841] FAT-fs (loop2): Directory bread(block 137) failed [ 492.343636] attempt to access beyond end of device [ 492.348675] loop2: rw=2049, want=291, limit=128 03:34:00 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x3200000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:00 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x3c000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xf0ff7f00000000}}], 0x400000000000284, 0x20004bc0) 03:34:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000300)=""/4096, 0x1000) r1 = memfd_create(&(0x7f0000000180)='nodev!\',\x00', 0x3) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000200)=0x27) syz_open_dev$usbmon(&(0x7f0000004c40)='/dev/usbmon#\x00', 0x1000, 0x6c41) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) tee(r1, r0, 0x3, 0x3) sendmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f0000000280)=@in={0x2, 0x4e24}, 0x80, &(0x7f0000003740)=[{&(0x7f00000013c0)="6b754a9fc831a2da0d4ce2986d", 0xd}, {&(0x7f0000001400)="5813bc1d6cba8c26645f325077739953b34a688b499c62f4368cc628888bdc91411bf56c02e7b96c9c4c339c1c38016b1c84ee6946c27cf8ae03480afa0553db21f5af8a1d8e9187e6e6a9063b97", 0x4e}, {&(0x7f0000001480)="9652697c7282a342a1f13ea533a918737cc624cb776d9d7144f19ddf3d4971b0ca54e80424b314c1b75e30ee19e736507237f0d65b0822f5df98ef7578721552d660a868025404a3b028cbd43d8d0fc042f8517a9a0a15e614fee50be897a878936a6b5e0a6b1c04e0b068e28fdcd85a553dabf5440623b1b4591056898e5c5386856966c5358a042867bc9336e4edbeb8a5b6408436ae027b52d6b2a6300dad1e0abcd948e8e1047bfa382f21ca322d1b904ed78c1e81922d9b77c20429855fda057b62035d78828a735ed00b4c51132ff57b36c5d29aae063b9896626c50da741c46", 0xe3}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="c09b82782af065e914f94209ade0709b5ea8522d8410af032806c31d8fac8a8ca5422b709c9de9c0795c3819c3b87e67ef61e8c2c8c7a35c7e631f4f4c9f4b71e453732ee80fa7fc89de64656f2bcce291dbab429e63941a69b2223804ec5f3d02a1727e9c9ca965908a2d84c95c9438b3034ceff7ad756bbf79875d3dfa61adb2fcfa8f90ada16123050c55897e2a43f444762554e7", 0x96}, {&(0x7f0000003640)="fd7a7215565929ecf849671361d518811a4720a49600230719b143767848bf6c01912d2d86967b7f98661e8ee0c42d62fa9e9a81281505bc7e4d943b943eeda301f16f27d2bc2c02cf2828569971214dbdcf4ef86bb9e428d61e245e2a302e97d159cf017ecc01b69a6d300f252dde9d05e8e479a4156cff8eee7670f956b9c0141149defd6021a66793c7d79e1f7793d4b9b88e83c4760e1429b9d704168f51e84200a6af7ab8bf20c308e9b6c52882f8aa327a1b839fb1775686f6ec5da2e130d24d68f66748174bcde174e3284eb8c763a69a6912f629b4a0aee0d09c", 0xde}], 0x7, 0x0, 0x0, 0x40}, 0x5}, {{&(0x7f00000037c0)=@in6={0xa, 0x4e21, 0x20, @empty, 0xffffffff}, 0x80, &(0x7f0000004980)=[{&(0x7f0000003840)="5c3e5d4c8b7e7044154b5b3c97792f729018b39c460c2387f735ed48ba7194477c71f8122f85f421e9c9dfaef84b3f240e99102f2e643bc201ac5ab3c580dedc2f76b92bb7b6cc594fec81234eab1bcf0db488c1953f0763cb98b354912bce7e752b02d3aa58aa65b6aff0635b601228f9d759c6eb891cd25a41429c0abe2cfbf12149deb1e0e312a830b04490af9e5504007e4d5e9deed663e7bc16bd399ec6bd8459cae817af1216fe8a423f880b633c5573b1fc4c1510cbb959d824fcb86f18f1eef9ef64dd19604df9cfb1e65246b7db72dbfb486602a6c09efa6684932b77bf8a813647f49e9c6b", 0xea}, {&(0x7f0000003940)="4b7eb95cf225f7bfa70c484173375ec0", 0x10}, {&(0x7f0000003980)="3699eb88098f177e4474716b540b66e3004b733aa2c2bbb64a53d6f1f69ddafa0d49dc423beba0336b618999a86be5561bfad8069e7cdc8c1a2cd5ec16cfa5a5c1abe388216e6c29c6e874fda7e94472213fff35830eb436e10f4e9363a6783557facc87279e18ef69f45c1400c7b566435098bd4ca66aaa7cb17f68f367dca4207f2a8a05874c81059b6bc05fd17dceeb8ff590bbcb06c7e69f90f6c5ebd8ce9d4257f56fa51f1ac9f1a68b1012af2e5beb838dd35236a1fbd7e83523e86c6fb6a33495247530c84dccaa39ea69fd51db567500d5679d04d1dca84ec46ac807a0125ac82551d85b690c693988759985fb260031771804fabe02b2c524b715610d0b4535269d6e22c50861363f4777a0ceb89296ba83ab9a1df6ecc7f24af7c386e27b45880ab923fe629fa3d26a800349c6113fe8d655b32a95152a48883b82cfe4b87deaf246b50ff0a2d3fff362e313e695235300676fb5dec9517b7c42935c7d7d5d810e8d257af65aa9d0fb20a8a8e7137f236daa3b76612a495dba394aaec0c191d07c2c5ecc657b5e17ebb21bc92f183bba34ec87440748c57424515bab1a06aebb7382d321358c121a1397f49daaf6dfb705e5277e948a59dfa13e7eadd01685607dabe007b286d9997f497f97b07b8e5b10fe4c9ba70dedd6f4272a4ccc77bedf864880177a0c58935419665ca413d81683eec732ccf4264f45af374cb9aa5afb5f2fb30cd5013d08633f21c44960b9e622ea843290c1bb0e6444300fe6aa818faae888b47e44e696a331490a3ebdee2183522026a4233d9e38ef142ec1859cc01f1e4951c601f53a9307f5dfc209af3c91fe8ff782270094d999997dff6f9fb36b7eace3264a1d5ce15f42decfb81f1f3dc4d87851e75147abf52df2852a4f6ac4a1169c00fad2b54211544486c6600eac08468aa252912dbd9174c6acb73aa9265db270b804f0afb897739aab4f89bd6fa963e36fc9f0b99349efef69311d7dcff54e1bdaa98a21950781ce458e622cca282792861a7a40752469ffc23b8015a89104e806686dbe53c313b9415c3389e54e2e20a870d1446c22b7a8b49a837e359eb8b8d8570539ff740a22d0467dac32012b8af50a242674d3f6c4f9df842e16eb3750ddcaac240cb51f8684e77fe82dafb9645dcd08505eabd15c6406e340fadfbc2d90ddabb337beeb3a2ff2fdb5c519dc4b048c26ac4ff5140024f8304dabb3c39758b967480b7a68510f9629225e059ca3d0ee3c6854a5e6255a15412ad960c33a18f4babcc8ae3ff403c41325c077cbacb12a425bf0c5e038fd03b152546217362d75528590a0a45a5bd00b3a10951391390a806cf14bf3f11808d1974a9424593e199aebd93bf2d602e9548b280b6baf452306445bdfb54190d65fde5828f48c0de53265f391ed9818fdf5b40130d50b31ccdd920fae6e2ec0f018a60bb96f64adbb8be5dc61bf619f935189635d1d4c433237a6777e21db3956a7fa571209dd11cfa3a46ff46ba63f873a942d6387df5ecaa0a14b3601ecfe43c60631aec63471b6615d6ac50876703d1d672ec1128822b62df0626e0aa5e489ee5de57826b14c41948aec70b95e60dddf533730e6545913c7cb8c3c8a4efc9025d40be6ba1ae7b685e0999eaf24e34936c57df986675e5693f3acdcdd0179a085324309c891ada765d662e5a4a342ad404351e4599a5e2e092c1e291da4c9fb8376b8bd793adb576762cc342ac3a937270e5c220d75418f6145e1072d77005154192c3fa76baa18d94956af243c08f1e40be69fb397df9e13eff66758995052a61b12b4a08e10217b95298249197e49ad87506f9cde2e9d741e2fcb502993bc11217eb279f7f6cd54ccaef94c67699c8271227ea48ff88b0f19c8d9f32de1bf9de226314b8e48cb88f3645ff0434931cdac545fce6ea543facd7f226ebc10f4bc5205e77aeae027f02d656c91dbeb6235205e10021bbc7168095de335b23de50cf63e6f80c31e0538d480acc30f367b795383c54b17e8f007e48c6afa142bc68930a4392616450909cbb297170cf376554a4b2055cd1dd353b5cb77e5c89b73faebf6157cb253c57715a6867b2d3af31de27c5460492918bfbb07b35985d9ea62006e205d256afc4c29f420fb313c13771490f7eb5996ed73c90e37e82140b944396efed5e10c3124a38f9bc2b4695b8cb7b12545da98908e6de11d7361214fe1f81c74c8daf8c8884e5922a15212e848392dea61bf1bfd12afac643add3dc87adb9a170bb2742af003aab5720b2ad7749e12fc3c7d5a255d98a1d38db13461d8d865c4c47c293029d72e3f830d4f627d1faf2233bd1d18cd67ab8748ca31925d8d3368ed14ea6016d8fdc889743a77793959c54fde8dbfa7830b8299c152fc82aa0149f9bdce494d72aa94e16a51482db8f2b6c248cd73fa6c3abd3cfc95e2d33ac371d2a20fb25d402684d545a67ac6321bdd6ad5c61b91035130d577be60c729c8366f4700aef95859b6d73cce0fb0dffaf587bb7bfdf0f806d22174d1c246ba1d59899900fbc3d6afb2da2bce80fc951ec898330f165d42ccac3f8cafedd144742b5f213100f25aa10ce11d98495d3e1b29e90a69590e69558799a2a466017479d5560cd7f446685fd0a043ce22d4617a4eaeeb518719e76a034fc25dd1f28653b38a4c9ed5bb871beaec0bfae1e9284701a3f2199e4e58a27f6816ca6084fcd1281a2a8b71e57b60f8eeb167b4047f0bd8f7e59ffa79deb1f1f66b34d75aa06ba55398aa16b20be3fcc5e2f31fa8d60ad0b89f00c817cc941850f15f0d9b339f6da1a36fbda05fd9cb98285ecb03324ac58d8e1377bbbb235b37122ab37104a29ca089dbfeef11b0143f0bf337b34aef144e5737079385c354ca030357405419200ccdc585c9a28f1ddf15eb260d91db7226a76d54b18e4d957b769ec86cf3ab9a7becf9862b03c948da7a7fcdcf4d99d4748939f0bcf90efb91ba08fb4acc5e794f5407b583038951b9d6b61b7b926c642eecf94bbe559f47f1e0fd135c4360502fbb1c752ba9832cb7b91ee989a4ab988d23dd2d429ca48e4b0e5adcda059d10db9bbaa1eda87b44d27bff129ab2e633e735279d2191df9bd62b7ae1909e97178a6c1090fd249424fc2142a8766d9ca822aebd08ae54de70adf944cbf80e9bce4ce2cf2aa0460c1825a054dc2d4b56d32bbfbb3d244ce62196c9bbbb58369a38da78ef294fb884adcf718aa4edcacaf17b2e488282fa9349d6920775e2b594e8d11ca1857a3d19a4bf1c4b3110330bdb69d941bff1035fcc1a74f7bf61d003ad143559ca94d71322db22f164fb88d1157042078a8a7d349ebf98da47f69884081c7537324816b0e5385fcab8da44c1e635cb52f7ae8ad5abc68b99fcd698ebf6fe2fe8bc216e087a73c060faa87a0bf8843ed17ab8f756c3b966a6f02efecf0bb9be23cf88e4a986ace458b81bf52f871b45f5c90a422f15e676e2008613873d3fbf2a6e05806280dea44e4f430aed4602dbf429786827e3e65af2352ec92026f5c183798fc93fcb7ca8db2df4400f3ec065811d8342c5752ef001d9d8ff7470fdb630a0b88544d5d3fd7ebf3b640e921e7972690801a97a190448e44558701e892545fb8e65f7592cc9b1b04cec864d88d2e5b9510e566a961e2ae764afa0ad7ed896e21fcbcff8f57840faf1ab96903c28ad1486b8334b3506d562699d24719e4c40f79c3b9274aab2d08e92e5add360547dcbb80b6a7be83bb70b0df365cdb4fa511b9a3ea8b4c0b1b2a68eb20b129d6b849a4a6e0384f01188ccee531587e57dc5fd7e8140303d3834763ec7d34494f3afdfc996df3a41b5dfa284796e7fdb23fb78cc9494e9eb9d925d92f378b62a380ae9c3a5c75360dbb7aa92a35b1c021f511fd3fb95df9c05447cdad961ad4ad2efc61634588bd9d784b5339151ebda7b076ec5fe8697f12e029c8bbf325ca62453523298201a004edf0e5ed37b99ff2e096f8d9c25a69b5bacbe51e10093cc472ef34f6dd6a4527195aabee7bbd23057fc85ff5e267b0beafb5832ba82cc6c3a15bb2e05ec65c1b03398318ce370082b52fccd0a6503bcbfabc32d348ea0a0e6cfc3f230856906b228b24326ce7ff002d9f709d1b02a98346cc73e19cfcea7f5b9421ef90ac229b8701377925f1f47f73619715e91dfa6e1768454bf6985c9ec084f7bb220ffc8177f2a0fc2d0efbacc25f7f57a7c179a0b6dbae74660a34a2d1ba903a1405a74849a69f67ee976e513f42c57cb1f3b14c1d660249e9cdf5bd399091729be4e4543f5737aaae51b6c6da177aabfba0570318f9fab63186c31cf4412b1f5136d0ed32e89b012fc721bd09359d29418ffbf4f9d23194b197e75f35881d7b5800b018e91da887208f55550c0bdbd8f38524c2e9e8aeace257c38b1747fc8c5d3556c0dc4d357a62a80829ddbce4173dbbf63406f6ffc3f1f02ea7b945afd77847f0705a4f01b9e5218c6e5e25d29e989b132b762749fc9745651d5bb2b055f3c4648c31cd077dfc64da73dd7d90eedf1003a69b262be0d229b47f40cbcd1a5a9c6e67c44e021793107d109e3a58b0d26cbb298a61110bd9631433797dd0360f5655251167bae4c13149e9b49b5e7ab56000b262b281b019087e26aad3f9a5b4f0f4c9c8ec4b43a25825d20d1178b5759fb8679ba333a4dee790e1b4d6b0e89f9fbba50d414191ae2f4902d4811a645deff0aa131c17c28c927aa26b956ff9ae879db77f930c774671b9dc6132b7d6c941c11460a6cb3e91f53c84416d7f1151a122ad1e4d21c3bba00f73f1f3a7d4e5cc4836ea94f938a03d1a5d6ef0d67618edb0d434ecd4278d81f30f3eb22f7221e1fdbb3c4f5d21c311f60f4d931caff8ddc22c862215b5a9ca4ae4e5bbb892bdb4731431b4e8bfaab3388bdf905dffa53b3b06e01e4efa27e2bc79af1dac637a86585913f7114b01ad1eea0cdd5d510772c7ddb4be938df3c86331c2ea0afb38a8e99bf1955947d1aba0958de68aff26d7fb97c39a2ba7b20d77f18831f9d2c3af6f1c321e3831dbfef6e66704cc9ac57221306a4caf60b3da846341343e58aa19307280abb5a79be2d22abd64bb3e69f5283a40b273f669faf3a9f5211221ed5fc3ab1d81ecf6454c2ef36d02b543bbbd96006b9851698058cc16abcc096ac1b8b43ba708f3635a8ebcf3c51d02f91bc6b98b1f7596290fc1ea13830c1a180614d2bab6667185cf74d138975c3d7772e20ae6c8d4c68db12876f21b196c10352d90ac1534cf081d7d55622cd23805d814755f51773f5b67a2ed0638c3a79bab9b7f320defe230fa468a75bf4ef514bb6af6b29825b0f67c8e0b7d0fef6bf5fc2a9e4e04feab3ad368e5cef4733ffecfad351b69090355bcbc2f8e031ec56a1f3a8e86cdff8b0dd1668cc8bd454c446f2207235a4425cb42591f9520bfb5af0770abab917b5878c3c80e0dd1217a4dbeff3e51ea3b8076e8d5cc86c60bef709e7ab79afcd2728cfee8119e7deed6c722e2299c8758c58f5e6b2e3c04e5b82ae3741531b3af3d3041214a70ed5ca4990a8d5db18ce8aaa18293818184df8150e90c60dc97274822cb7a7445b8f2f5c8af93dc525db2ddc8078941426b4f2306b944066b9d84136872edacc85f8a3acdb157cabee946f88aa81ce14755d4b72dd2104b5fe45abfef8872004c071f39c0796c7fa42ee2077fc2ed55c927dec11706a91622f1f5577418629d49102c9f64c3be4724602ab455052e4dcb7aad15fda342b176d051b8be08f537ff2e610e6a954a317", 0x1000}], 0x3, &(0x7f00000049c0)=[{0xb0, 0x118, 0x0, "8c6cac78b2b2a7b9f277861432c628e10bd11df5e506a35094c4136f9d0e7ec2cb2f6989b3fe743835222996b5a7d410b16489a028b25188a248a76d999c067c19a6691fe6baabf9aa18e45419540d1708dad04a47f8e531fe10ad5848bb52bb55ea24b0fde6d3290368454ce4ef6300dfb560146b18f0b2db21dbf246966cb24d318634ee9e43ab91304367cbe451092eeb45f4461f3eeeda3b14"}, {0x30, 0x114, 0xea, "7ecaa43096510b66468ddd2e49bab6ad58a83bfb17295835821374"}, {0xe8, 0x187, 0x80000001, "555564409019fef07b873089c9f54a8627c3cc482646a6c693f22c1c25a807a9db2a2ee02289212ee0fad1050f60b70b2d5fcaa06148c4f5e973de4096b139f7adb7e6431b18a2340db720bb573de430bce740cd7b01d535f056fdcb526f5ee4427eaec502ba3f438fa99400e42277e6942ab1a40d710c07ab0166b9b174f96ef1cac20cc7dc558afc08add0a9dda72450670880e48b035fad6dbe3a918d365bd2f79644de0acea09fdb9890c50eb844ae5b0ac760d9c3393f1881c9a3f4d92584d8247b541ffd642a9ca078e327281940"}], 0x1c8, 0x48000}, 0xfffffffffffffffc}], 0x2, 0x800) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000c476000000ff0f0000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000001300)=ANY=[@ANYBLOB="a5047e1ebad2da3bb746e9d4239f6b7d34a5c3796831ff4ae2050727c1e52191e326490f158cfa283574187d205350227f87f0b7610d21d32f8153607012e416f9ce152b1db40bd9d8f724bc7f730d64c7dcb69d2414411f854bf33a2e053b45cf0a6c625c8361b41323e03675d80f74f61768b44fa77fe85b5573663cce488f87c54767c1bbd869cf70d4807bb9309bbdad88dd9d161ea2639e03ee43d73f", @ANYRES32, @ANYBLOB="020000000000e8280000009c"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000300)}) msgget$private(0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x20, 0x70dc, 0x7}) 03:34:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x4000000}]) 03:34:00 executing program 0: r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'vcan0\x00'}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x8, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000000040)) 03:34:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9103000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 492.535951] binder: 8357:8358 transaction failed 29189/-22, size 24-8 line 2852 03:34:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x2000}}], 0x400000000000284, 0x20004bc0) [ 492.586902] FAT-fs (loop2): Directory bread(block 128) failed [ 492.623966] FAT-fs (loop2): Directory bread(block 129) failed [ 492.632233] binder_alloc: binder_alloc_mmap_handler: 8357 20001000-20004000 already mapped failed -16 03:34:00 executing program 6: r0 = socket$inet6(0xa, 0x80000, 0xfffffffffffffffd) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x420800, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[], &(0x7f0000000340)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:34:00 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x608], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa301000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 492.661845] FAT-fs (loop2): Directory bread(block 130) failed [ 492.698655] FAT-fs (loop2): Directory bread(block 131) failed 03:34:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x4}}], 0x400000000000284, 0x20004bc0) 03:34:01 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x86ddffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 492.709125] binder: BINDER_SET_CONTEXT_MGR already set [ 492.729936] FAT-fs (loop2): Directory bread(block 132) failed [ 492.736364] binder: 8357:8375 ioctl 40046207 0 returned -16 [ 492.747616] FAT-fs (loop2): Directory bread(block 133) failed 03:34:01 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000001600)={0x401, 0x7004}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f00000000c0)='./control\x00', 0x5, 0x6, &(0x7f0000001540)=[{&(0x7f0000000180)="c44835b3d9784cf15cda4be669770dba8faae87a761dfbf590b852a3d594a2ae425189af4ccb85795af98486dd3220272f6b8e552b094fdc64176aa946754e636684686ddd8b5df23438d2f9efcfcdf5218f5a94155c8e83739d99d0fa9b4bd9ca27b41a066272563b9393565505b9605c52d764b6d871636b495eb9fcf2c480186c9533fd5b34b5525da701327c6f4ae7f633bca581a57c61c6b0e6120f618ec3e13763eccccfcb5c9cd67299d97449b1cf5b0722bd2252b3473691b34e350b4609a6e2a8353d0542225f1ac541", 0xce, 0xcd47}, {&(0x7f0000000280)="13b8b231dc5f22beb05d7cc73013cb9642ffe37b198c71f3f99a2f34b69c87fc9af5d0e174106042b7cc2a116b5511ab48aa0a5fbedeae9a3837b3de4e4b7016866284f427d905e44eabfcb806f5b1d416f08e6511a53fc3d855181d216ba851622e16ceae766649d1957f56c0ec0b9e4b6607416c6bf5504a550c91072795a05e8e09bb94908d66ebec6e3813a2531712bdd4964787f98110", 0x99, 0x7f}, {&(0x7f0000000340)="503e3424727075544f72a57242bd58f3fbcad8c35858d58c97de9f0c9c0f009c6683c88e7d10e246ae785134d642539fb61f2e0e315b264c970b21be708de96ad57297715dd9bb90322682089be87f0b6383460458132dc47156c806905179021570fa10e5324eacfe4c1ad052a6337fa09cfda089a51edf88dde301762ee3970c1923ed89021c3e9b2a48fe2168987c6efcccd0e698cf4117723dfa80b5f03080fe17635ed18ebc752ffeb6bcce07fb47d188bcb6512ca8a8989fa1e1f698a3707443d4532cb427e65ec95639983ad4409bb5338cec34952c5fbf915acb59d68ad9a0a0333ab9988009e5095318f1", 0xef, 0xffffffff}, {&(0x7f0000000100)="11d367e5560f97e4cf6460aa2aea353cd29a83edc4fadf8d5774d61c67", 0x1d, 0x3ff}, {&(0x7f0000000440)="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", 0x1000, 0x3}, {&(0x7f0000001440)="d6241b9faefdd7b3dec055ab362b8c9eec4c75c922fcea7aa64e2a3d8ceba1fd576ed89a6e72d7f63691813f51d1407909b65cb232e1a2d75dae7f1f444861bd12b759d7203b6026bea841dcced1827068629eade4d20617c6387fcd9e6ca4bbf353c22395e3a3ec23d4595c2b44ae78abc59116a8faf770d0658934c68ef6080d924e664436bdb9f9c02f58b588b4b6e7c5d76c306682f0a99b7f65e02ac749951297765a7a667a4f71c5a491e933be51e8f29a32d482c004f963a576de68853cc093f4510bf4626a9f405bfba2dd74fa3e0598b37dd994fdaf40264dedeef037033d37bb8493b908ce1a455b8471", 0xef, 0x7f43}], 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="6e6f65787468696e745f6d6f64653d6f66662c696e6c696e655f64656e7472792c6e6f696e6c696e655f64656e7472792cab0000000000000000000000187d6d9e1ecee6c954dfa6735d49e6a16aab95fcd4d3e5f786a85113a50c213488657b910ecada97093769b1b96beb91da5bda137665bd0ae096e72e881b5a8ab37afce98ba188a6dd97f5f3f7f967dace1f0cf72a639f4cb8"]) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r2) 03:34:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9e000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 492.759614] binder: 8357:8358 transaction failed 29189/-22, size 24-8 line 2852 [ 492.766124] FAT-fs (loop2): Directory bread(block 134) failed 03:34:01 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x82802, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000004"], 0x29) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) open_by_handle_at(r1, &(0x7f00000001c0)={0xa7, 0x7, "e1c5d1353b351b9daeeb3a1e64f54e0850e5d78866d9dff35926132028ffc96760685b8bb31661700d16f343b7e4bf2751d47e47c18985f9a7e42ccfe6f9b2337cb2ee48d8e036a64faf2e2708b5a159e2f01927445f1b89235464145ef67bd40648245c5cd746306f96b3325f097d376f847a8efd43ef7f33e4dca3cf065c392576ca91a7b04232d1aa2e9cb51d9d26ffce920842d9d5fdc1277ab58d545f"}, 0x8000) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) [ 492.853782] FAT-fs (loop2): Directory bread(block 135) failed [ 492.868947] binder: undelivered TRANSACTION_ERROR: 29189 [ 492.872612] FAT-fs (loop2): Directory bread(block 136) failed [ 492.880580] binder: undelivered TRANSACTION_ERROR: 29189 [ 492.887530] f2fs_msg: 6 callbacks suppressed [ 492.887561] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x223338b5) [ 492.899829] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 492.917113] FAT-fs (loop2): Directory bread(block 137) failed [ 492.994760] attempt to access beyond end of device [ 492.999857] loop2: rw=2049, want=311, limit=128 [ 493.024130] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 493.031281] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 493.080840] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x223338b5) [ 493.088599] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 493.106588] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 493.113704] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 03:34:01 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x800000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:01 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x5800], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x127bfaf8}}], 0x400000000000284, 0x20004bc0) 03:34:01 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xbd164c0c1775fd33, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="6003005d4b"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x80, 0x0) connect$nfc_llcp(r4, &(0x7f0000000140)={0x27, 0x1, 0x2, 0xcb9045e410146803, 0x0, 0xb329, "78a74382a88f3ac735c375da72927c64d7cf6e07ca269ccd87d1f4816159cb508d9fc6ad6cf4503513e9102c9cbb5ccecc235eb96a9e028e311be04cef3868", 0x3c}, 0x60) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xffff0000}]) 03:34:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet(r2, &(0x7f0000000100)="1222a145987751d5a97944a89a28442fa991291b4d9ecd5a3f11fb82616e74dbfdfcafe5e9f3f19ab21023a229b82af91fb6cb5cce43b91cf27105edc71610c60bed244ea91ec0d2799c063afcedb406da4c34fff6a164f1d27c510a9b85e00f15da0b827f49a23b73c8bc21dbbb35ba93cfba4e74c5990c4800b86ad36ec349ba0fc29c2eb2f6aac6fb5ac359b4dccb0d52ccf8b7d80233e4827b6c1148083f302199840b6f41bdc11b364f0d1a46d0b687", 0xb2, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xfffffffffffffffb}) socket(0x8, 0x7, 0x2) 03:34:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x20004bc0}}], 0x400000000000284, 0x20004bc0) 03:34:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 493.285810] FAT-fs (loop2): Directory bread(block 128) failed [ 493.287399] kvm: apic: phys broadcast and lowest prio [ 493.312854] FAT-fs (loop2): Directory bread(block 129) failed [ 493.324788] FAT-fs (loop2): Directory bread(block 130) failed 03:34:01 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x3580], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 493.342190] FAT-fs (loop2): Directory bread(block 131) failed [ 493.385867] FAT-fs (loop2): Directory bread(block 132) failed 03:34:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x7}}], 0x400000000000284, 0x20004bc0) 03:34:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:01 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8bffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 493.437092] FAT-fs (loop2): Directory bread(block 133) failed [ 493.505157] FAT-fs (loop2): Directory bread(block 134) failed [ 493.538287] FAT-fs (loop2): Directory bread(block 135) failed [ 493.548672] FAT-fs (loop2): Directory bread(block 136) failed [ 493.574494] FAT-fs (loop2): Directory bread(block 137) failed [ 493.609463] attempt to access beyond end of device [ 493.614511] loop2: rw=2049, want=311, limit=128 [ 493.746674] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x223338b5) [ 493.754401] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 03:34:02 executing program 0: pause() mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000001c0)='.', &(0x7f0000000080)='.', &(0x7f0000000380)='mslos\x00', 0x500f, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) accept$unix(r0, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x100) umount2(&(0x7f00000003c0)='./file0\x00', 0x6) 03:34:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYBLOB="555f2e11c2b735a894579d26971665cb170d8739b1da992713d325ffd768c3c4b24e27c79bc339dfb70a2f36fa19578430ab8dac5f0cff103502f6f6"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="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", 0xfa, 0xfffffffffffffffb) keyctl$read(0xb, r3, &(0x7f00000002c0)=""/24, 0x18) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x200000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000003c0), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000040)) 03:34:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x200000000000000}}], 0x400000000000284, 0x20004bc0) 03:34:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x13, r1, 0x0) fallocate(r1, 0x0, 0xffff, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000000000000009) 03:34:02 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:02 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x3000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x7fffffffffffffff}]) 03:34:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:02 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x58], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x83270000}}], 0x400000000000284, 0x20004bc0) [ 493.896327] FAT-fs (loop2): Directory bread(block 128) failed [ 493.923175] FAT-fs (loop2): Directory bread(block 129) failed [ 493.940145] FAT-fs (loop2): Directory bread(block 130) failed 03:34:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setxattr(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)=@known='system.posix_acl_default\x00', &(0x7f0000001700)='eth1vboxnet1ppp0$/\x00', 0x13, 0x3) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="a9476af1c4d6b10aa55f627421cb9d39c99313b3d43e63704db32f7cf44a486bee584e763bc820c73a5737d3924d28640671d5469aae8d5cc79fa4bf0f77cabf2e64439f8ee3c79a989af284e7838dd4579d9efd492922baf83de04cc3724ff1723948ac", 0x64}, {&(0x7f00000000c0)="dce9a9b5e3695000c08d4072a78ec4a7bbe3097d670667ad81d9e103d7082949bb4288d319b787891fcc4080ae3caa9f75591973581771dccb49a7c02cf995eaf768bb3e06161ccd513c346753f47822e7338947aca4346f0b25218491dac030a740c39dba64878fa03f4095d1cfe83821ae0b8e0340af0613ebc3dca36f24e0b8a4febdb36712c9808dae5342e15234b37591", 0x93}, {&(0x7f0000000180)="f8fc58c48c0c4cf262d2677e479731c6cf91b300e2d42dc1f8ef08c5313e8a3b06442727d65e3f5da45a85819542f7e2cb3111e76e6bbcea57b9149d1d8861d2ed60e7ade8f8", 0x46}, {&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000000300)="4a9724cac0f0a58273006d00333718edb1b6fde48b9a73832a01223086b84a16be91b7bb62f4faf65fdb82d9b739575295cf6fbae76e566c89f98bbacaa2e5040a2184910e3911f777c64a9795cf5f0e47435e096dc48ffc6c5638ae77d2c1c08ef54123bb74f9be010c006989dffe78d32e712b91ef6f2ba3a05db4e0e92635c8a0988ebead8a856df9802585a83b9be14035ccc780906b4140a6122da3c949c4d7b94b8996cabe4b4a14c999091d611721a6e714de088b0ca4c9bf2e9302a374d07180cb424358a849770c9159bb82e16a5d0fddacd1c6ef1cbbba6a25", 0xde}, {&(0x7f0000000400)="3a6554351a3d4fe3e1a3c91c8a0150e8e357062b3da9b65377ff0cf1024f7be6322e2ff4af3ddffc314ccdea12bf2af38d9ed9051df4a41b149d4666fd8bfca5f9fea85fb6f319bb1a5cc8f2c23ab82deaec52b0aa6aba2c34e917881ede602eb0d52d14156cefecaf81db56ebdb895470c60bdc4a23d62f80d89837f87d7c4807b63ec165c9547e826b326d4e28e70b0e58935e6ba62d75dd66a26e23a2ac3bd5db40a11e8d2bb587e176b5517905ef6be274097fefeaf89832fd025c2fe80d24a4134ccf672447ff30a8010a2f035a474804497dad003ccc30ec70393e85ad", 0xe0}, {&(0x7f0000000500)="696b34858a6c0973c1409672e96af3578d8b2d670687f5647e1e879ffa8a10206d36e465e49305fbe2b202db081ac17ec4a0449600c7def3b5481a1ed9f0e08ec145bd6f9c", 0x45}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="5a34b0a48588e2f7da0d2b78617a017c74f3", 0x12}], 0x9, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000001ec0)=[{0x18, 0x1, 0x1, '\x00'}], 0x18}}], 0x2, 0x0) 03:34:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000318b96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x2, 0x1, 0x200, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x1538000000) 03:34:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf0ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 493.975620] FAT-fs (loop2): Directory bread(block 131) failed [ 494.013690] FAT-fs (loop2): Directory bread(block 132) failed 03:34:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x18020000}}], 0x400000000000284, 0x20004bc0) 03:34:02 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x4], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 494.053201] FAT-fs (loop2): Directory bread(block 133) failed [ 494.069271] FAT-fs (loop2): Directory bread(block 134) failed [ 494.133137] FAT-fs (loop2): Directory bread(block 135) failed [ 494.140329] FAT-fs (loop2): Directory bread(block 136) failed [ 494.159668] FAT-fs (loop2): Directory bread(block 137) failed [ 494.204969] attempt to access beyond end of device [ 494.210071] loop2: rw=2049, want=311, limit=128 03:34:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c400001900050b00000000000000003f00ffff00000040000000000000007f00000100000009000047fd000000000000000000000000020047000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0010000200000000000000"], 0xc4}, 0x1}, 0x0) 03:34:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x7ffff000}}], 0x400000000000284, 0x20004bc0) 03:34:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x400000000000000}]) 03:34:09 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140), 0x8) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180), 0x10004000000443) fstat(r0, &(0x7f00000001c0)) 03:34:09 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8bffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x1, 0xc0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x58, r4, 0x20, 0x70bd2a, 0x25dfdbff, {0x5}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000000)=""/119) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x20000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:09 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x5}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:09 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xff00000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x9}}], 0x400000000000284, 0x20004bc0) [ 501.560601] FAT-fs (loop2): Directory bread(block 128) failed [ 501.591492] FAT-fs (loop2): Directory bread(block 129) failed 03:34:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="6000000b977f08680bfa3b7e064bf8f2448fae42ca3860255818deb1b3b4"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0xf, 0x804, 0x7fffffff) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 501.617143] FAT-fs (loop2): Directory bread(block 130) failed 03:34:09 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x100000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x283}}], 0x400000000000284, 0x20004bc0) [ 501.665660] FAT-fs (loop2): Directory bread(block 131) failed [ 501.702410] FAT-fs (loop2): Directory bread(block 132) failed 03:34:10 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x88caffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 501.729198] FAT-fs (loop2): Directory bread(block 133) failed [ 501.767313] FAT-fs (loop2): Directory bread(block 134) failed 03:34:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x5}}], 0x400000000000284, 0x20004bc0) [ 501.801299] FAT-fs (loop2): Directory bread(block 135) failed [ 501.831209] FAT-fs (loop2): Directory bread(block 136) failed [ 501.851343] FAT-fs (loop2): Directory bread(block 137) failed [ 501.898121] attempt to access beyond end of device [ 501.903189] loop2: rw=2049, want=311, limit=128 03:34:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000080)=0x80000000, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180), 0x0, 0x1000}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x5}], 0x10}}], 0x2, 0x0) 03:34:12 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x88a8ffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x700000000000000}}], 0x400000000000284, 0x20004bc0) 03:34:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xffffffffffffffff}]) 03:34:12 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x46}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x168, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="700000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:12 executing program 3: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$seccomp(0x16, 0x3, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 03:34:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf0ffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xf0ff7f}}], 0x400000000000284, 0x20004bc0) 03:34:12 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x4888], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:12 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000001000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 504.286404] FAT-fs (loop2): Directory bread(block 128) failed [ 504.306419] FAT-fs (loop2): Directory bread(block 129) failed [ 504.315100] FAT-fs (loop2): Directory bread(block 130) failed 03:34:12 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x10001, 0x5b, 0x9, 0x200}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x7, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e22, @rand_addr=0x2}, 0x2, 0x0, 0x2, 0x1, 0x0, &(0x7f0000000080)='syzkaller1\x00', 0x1, 0x1, 0x1e}) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000f52600303afffe8000000000000000000000000000ffff02000000000000000000000000000188009078ff609b1d84b0c88ed3000000fe8000000000000000000000000000ff00000000000000000002ffffac140000fcc2ec2c38479a821c30fa84e1a4319ca5fa74dc8d9c3b651130b8a36444c2f7eda43123de69cea010c5563eaa5389c14bac783c802de532881c7476d36a8a7c3c0c1f03040a0139c2ee2275ee7edc6f03427a899f1889399f6059bb584a9e2e24f479bb6b81c04c6089c75f418346616a33a602f97b45a5000083916d488508f49fa0568bc8b8676b1093d9eff5dd805ea9fc0461e3661f15837aa27eb8262f201dcf36180517462aad48b08999ca341a3091dcbfde5c70b4b7c446980011508add4c83540000000000000000000000"], &(0x7f00000016c0)={0x0, 0x4}) 03:34:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 504.352764] FAT-fs (loop2): Directory bread(block 131) failed [ 504.389149] FAT-fs (loop2): Directory bread(block 132) failed 03:34:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x40020000}}], 0x400000000000284, 0x20004bc0) [ 504.410543] FAT-fs (loop2): Directory bread(block 133) failed [ 504.428872] FAT-fs (loop2): Directory bread(block 134) failed 03:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80200000, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 504.464636] FAT-fs (loop2): Directory bread(block 135) failed 03:34:12 executing program 0: io_setup(0x0, &(0x7f0000000280)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {0x2}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x16}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20048085) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='status\x00') getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) futex(&(0x7f0000000000), 0x400000085, 0x0, &(0x7f00008b5000)={0x0, 0x989680}, &(0x7f0000000080), 0x90020001) 03:34:12 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x3c00000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 504.529117] FAT-fs (loop2): Directory bread(block 136) failed [ 504.560457] FAT-fs (loop2): Directory bread(block 137) failed 03:34:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x8327000000000000}}], 0x400000000000284, 0x20004bc0) [ 504.600754] futex_wake_op: syz-executor0 tries to shift op by 32; fix this program [ 504.624487] attempt to access beyond end of device [ 504.629594] loop2: rw=2049, want=311, limit=128 03:34:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x8000000000000000}]) [ 504.813544] FAT-fs (loop2): Directory bread(block 128) failed [ 504.825135] FAT-fs (loop2): Directory bread(block 129) failed [ 504.838253] FAT-fs (loop2): Directory bread(block 130) failed [ 504.855111] FAT-fs (loop2): Directory bread(block 131) failed [ 504.864829] FAT-fs (loop2): Directory bread(block 132) failed [ 504.877488] FAT-fs (loop2): Directory bread(block 133) failed [ 504.889236] FAT-fs (loop2): Directory bread(block 134) failed [ 504.902010] FAT-fs (loop2): Directory bread(block 135) failed [ 504.914129] FAT-fs (loop2): Directory bread(block 136) failed [ 504.925992] FAT-fs (loop2): Directory bread(block 137) failed 03:34:13 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x7}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:13 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x84ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="9b", 0x1}], 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x2) 03:34:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x900}}], 0x400000000000284, 0x20004bc0) [ 504.956654] attempt to access beyond end of device [ 504.961707] loop2: rw=2049, want=311, limit=128 03:34:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xffffffff00000000}]) [ 505.167339] FAT-fs (loop2): Directory bread(block 128) failed [ 505.213915] FAT-fs (loop2): Directory bread(block 129) failed [ 505.233921] FAT-fs (loop2): Directory bread(block 130) failed [ 505.240656] FAT-fs (loop2): Directory bread(block 131) failed [ 505.250119] FAT-fs (loop2): Directory bread(block 132) failed 03:34:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4040aea0, &(0x7f0000000140)={0x2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000080)={0x2, 0x5, 0xe6a, 0x0, 0x5f9, 0x3814}) 03:34:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xf8fa7b1200000000}}], 0x400000000000284, 0x20004bc0) 03:34:13 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000200)=0x3, 0x5e, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000080)=0x8, 0x800, 0x0) 03:34:13 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x93ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 505.263907] FAT-fs (loop2): Directory bread(block 133) failed [ 505.292315] FAT-fs (loop2): Directory bread(block 134) failed 03:34:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x1802000000000000}}], 0x400000000000284, 0x20004bc0) 03:34:13 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffa888], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc080, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x1, 0x1, 0x1000}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r5, 0x100000000}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:34:13 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r1, 0x8000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x9, {0x2, 0x4e21, @multicast1=0xe0000001}, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7c, 0x3, 0x2, 0x1, 0xfffffffffffffffc, 0x0, 0x7, 0x100000000, 0x80000000}) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000200)={0x9, 0x1000, 0x0, 0x4, 0x5, 0x4, 0xffffffff, 0x80000001, 0x101, 0x44}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000180)={@remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr}, 0x8) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000003822848612d7b0b8"], &(0x7f00000001c0), 0x0) [ 505.334289] FAT-fs (loop2): Directory bread(block 135) failed [ 505.355725] FAT-fs (loop2): Directory bread(block 136) failed [ 505.392250] FAT-fs (loop2): Directory bread(block 137) failed [ 505.499778] attempt to access beyond end of device [ 505.504812] loop2: rw=2049, want=311, limit=128 03:34:14 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x4000000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f0000000140), 0x3c, 0x20000802, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) r1 = socket$inet6(0xa, 0x2, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0xf}, 0x43, r2}) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = dup(r0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0xbc) shutdown(r0, 0x1) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000000c0)) 03:34:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x300}}], 0x400000000000284, 0x20004bc0) 03:34:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xf4ffffff00000000}]) 03:34:14 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xfffffff5], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000001, 0x800) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x1ff, 0x7, 0x59, 0xdf, 0x7fff, 0xffffffff7fffffff, 0x10001, 0xfffffffffffffffc, 0x4, 0x2, 0xfffffffffffff000, 0x813, 0x2}, {0x7, 0x8, 0x8, 0x100, 0x7b25, 0x3, 0x5, 0x4, 0x7, 0x1, 0xed8, 0x0, 0xfffffffffffffffb}, {0x80000000, 0x2, 0x2, 0xfffffffffffffffd, 0x1, 0x4, 0x87, 0x8, 0x2, 0x8, 0xffff, 0x0, 0x3}], 0x2}) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000000}) 03:34:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:14 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xf000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x400000000000000}}], 0x400000000000284, 0x20004bc0) [ 505.920777] FAT-fs (loop2): Directory bread(block 128) failed [ 505.955421] FAT-fs (loop2): Directory bread(block 129) failed 03:34:14 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff0204000000020500000000000000000000000000000000", 0x18) r1 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x4) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r0, &(0x7f0000000200), 0xc0fe, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c) 03:34:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 505.985604] FAT-fs (loop2): Directory bread(block 130) failed [ 506.014879] FAT-fs (loop2): Directory bread(block 131) failed 03:34:14 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x600], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:14 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000000005015, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000100)={0x4, 0x101}) flock(r0, 0x3) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)) fcntl$getown(r1, 0x9) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0x7, 0x4f44f0e4, 0x6, 0x7, 0x4}) [ 506.059159] FAT-fs (loop2): Directory bread(block 132) failed [ 506.077634] FAT-fs (loop2): Directory bread(block 133) failed 03:34:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x8302000000000000}}], 0x400000000000284, 0x20004bc0) [ 506.109810] FAT-fs (loop2): Directory bread(block 134) failed [ 506.136131] FAT-fs (loop2): Directory bread(block 135) failed 03:34:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', r4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 506.176441] FAT-fs (loop2): Directory bread(block 136) failed [ 506.194148] FAT-fs (loop2): Directory bread(block 137) failed [ 506.250818] attempt to access beyond end of device [ 506.255852] loop2: rw=2049, want=311, limit=128 [ 506.297699] IPVS: ftp: loaded support on port[0] = 21 03:34:15 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x11000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:15 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x3300], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x3000000}}], 0x400000000000284, 0x20004bc0) 03:34:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000018009500000000d95035fafffffffffffffff4995cdce120996b4c37de4e00000020852a0cc87fde"], &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r0, 0xfffffc61) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1, 0x5, &(0x7f0000000080)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x90, &(0x7f0000000140)=""/144}, 0x48) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 03:34:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x1000000}]) 03:34:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x83020000}}], 0x400000000000284, 0x20004bc0) 03:34:15 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x33], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 506.844207] FAT-fs (loop2): Directory bread(block 128) failed [ 506.861287] FAT-fs (loop2): Directory bread(block 129) failed 03:34:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x4) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) read(r0, &(0x7f0000000080)=""/100, 0xfffffffffffffd79) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48}) [ 506.889086] FAT-fs (loop2): Directory bread(block 130) failed [ 506.923895] FAT-fs (loop2): Directory bread(block 131) failed [ 506.968756] FAT-fs (loop2): Directory bread(block 132) failed [ 506.994236] FAT-fs (loop2): Directory bread(block 133) failed [ 507.015161] FAT-fs (loop2): Directory bread(block 134) failed [ 507.024381] FAT-fs (loop2): Directory bread(block 135) failed [ 507.032895] FAT-fs (loop2): Directory bread(block 136) failed [ 507.044148] FAT-fs (loop2): Directory bread(block 137) failed [ 507.063922] attempt to access beyond end of device [ 507.068938] loop2: rw=2049, want=311, limit=128 [ 508.313253] device bridge_slave_1 left promiscuous mode [ 508.318892] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.329937] device bridge_slave_0 left promiscuous mode [ 508.335441] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.247837] team0 (unregistering): Port device team_slave_1 removed [ 510.257612] team0 (unregistering): Port device team_slave_0 removed [ 510.267174] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 510.283985] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 510.309514] bond0 (unregistering): Released all slaves [ 510.622117] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.628548] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.636334] device bridge_slave_0 entered promiscuous mode [ 510.672747] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.679180] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.686951] device bridge_slave_1 entered promiscuous mode [ 510.725684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 510.762889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 510.868350] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 510.906307] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 511.078040] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 511.086211] team0: Port device team_slave_0 added [ 511.122311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 511.129718] team0: Port device team_slave_1 added [ 511.166152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.204607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.242291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 511.281810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 511.622576] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.628968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.635606] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.641955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.649304] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 512.352153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.460169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.539899] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 512.614354] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 512.620509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.628116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.699536] 8021q: adding VLAN 0 to HW filter on device team0 03:34:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) fcntl$setsig(r0, 0xa, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x19) 03:34:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x3, 0x7, 0x8001, 0x7f, 0x74}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r4, 0xfff}, &(0x7f00000001c0)=0x8) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xe8edff7f}}], 0x400000000000284, 0x20004bc0) 03:34:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x85ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xfffffff4}]) 03:34:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:21 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x32000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:21 executing program 3: r0 = fanotify_init(0x40, 0x80000) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="312ad38804555a89d0bacbf4e1aa485c", 0x10}, {&(0x7f00000006c0)="f39cd55f721221beed37f796a4bb187a3ead3a8f004f59fae9bddfe59809efea9795238ce821456af17331aa373ae0bd9e42624b159417db8a37e7f4f1d07d37027d7bdf4e277f5cbde03c4101e2e7a131279497466af18428d00c53b47fbe0d44bd24f5f35bcc7cebb79b7b7de0f9981c0be4dc702b6f86b029397eb1d87c708d8f09a9da9ec129e1dc8c49d4ad8df4a8175fb274cecff48f1029c4d9a664f3b8", 0xa1}], 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000080)=""/221, 0xdd}, {&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000000)=""/33, 0x21}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/20, 0x14}], 0xa, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa, 0xfffffffffffffffe}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 03:34:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x7fffede8}}], 0x400000000000284, 0x20004bc0) 03:34:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x93ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x1, 0x208, [0x0, 0x20000880, 0x200008b0, 0x20000a58], 0x0, &(0x7f0000000480), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x2a3) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x4000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x8) socket$inet6(0xa, 0xa, 0x5) [ 513.215692] FAT-fs (loop2): Directory bread(block 128) failed [ 513.245531] FAT-fs (loop2): Directory bread(block 129) failed [ 513.287167] FAT-fs (loop2): Directory bread(block 130) failed 03:34:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x4) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x5}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='./control\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000100)="0b939841aeb5624f4f33710f4c389e7c24f9e805d011460a48f2aff0ee6e5270e916b7392afee70ea5ca057eeb3bd14d897abcc31d3d7e40e6304cddfd6bc2da850b6d9aa43be965dc7379da214648ae51335af74b761933c7ce30dae784edf87bdf1520eaba2a30d47480653011e0b2f0e1b142cf9fbec4954b25dd983ae34f81213b66ba5cfdb1ec9e152afbed46a719c194da1d5979239d5f48399a75c9b876c122acc0b36f595d67d43833f31d445b67e3af9284510c14d779df079a874b0810afb25a3f2f868069bcb12b58bcfce59861d79e6fe905a533f430b36c0e752886f326a4f1", 0xe6, 0x3}], 0xfffffffffffffffe, &(0x7f0000000300)={[{@balloc_hashed_reloc='block-allocator=hashed_relocation', 0x2c}, {@nouser_xattr='nouser_xattr', 0x2c}, {@noattrs='noattrs', 0x2c}, {@hash_r5='hash=r5', 0x2c}]}) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000300), 0x100) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000340)={'raw\x00', 0x95, "c4f1d51b9274a5c8f33f425187ef053f6fcb54153e2c895f4d4100e1e6046034157bda09c48cad8aa8e3a2cf73af796d8c4748a86b7e7d7762a39d4d420a11226831278171a05d7415bf537df446605ab7df26e7bc31aac300f36384232520299b0c3533932cdf2a8e912b07b4b30570b4871345af0b62ebda25c3995fe53dbd3f12ec9d8aaa86f654f1aac4022947658dd78e598e"}, &(0x7f0000000200)=0xb9) [ 513.329643] FAT-fs (loop2): Directory bread(block 131) failed [ 513.359792] kernel msg: ebtables bug: please report to author: Wrong len argument [ 513.365177] FAT-fs (loop2): Directory bread(block 132) failed 03:34:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x43050000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xffffff7f00000000}}], 0x400000000000284, 0x20004bc0) [ 513.394166] FAT-fs (loop2): Directory bread(block 133) failed 03:34:21 executing program 6: socket$inet6(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 513.444981] FAT-fs (loop2): Directory bread(block 134) failed 03:34:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff8f], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 513.491704] kernel msg: ebtables bug: please report to author: Wrong len argument [ 513.516583] FAT-fs (loop2): Directory bread(block 135) failed 03:34:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x4000000}}], 0x400000000000284, 0x20004bc0) 03:34:21 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x4000000000306}, 0xc, {0x2, 0x4e1f, @multicast2=0xe0000002}, "00000100002b53850400"}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x3, 0x0, [{0x1f, 0x3, 0x0, 0x0, @irqchip={0x7, 0x3}}, {0x3, 0x3, 0x0, 0x0, @msi={0x0, 0x7f, 0xb7}}, {0x8001, 0x2, 0x0, 0x0, @sint={0xfff, 0x5d}}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00400013001100ffffffe1ffffffea00000000d16a2ea2dff33a21facc23ea8506f1e592632936", @ANYRES32=r0, @ANYBLOB="0000f9ffff800d8ce524fc06eb8ffc33"], 0x2c}, 0x1}, 0x0) [ 513.573811] FAT-fs (loop2): Directory bread(block 136) failed [ 513.607598] FAT-fs (loop2): Directory bread(block 137) failed [ 513.683801] attempt to access beyond end of device [ 513.688960] loop2: rw=2049, want=311, limit=128 03:34:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xfffffffb}]) 03:34:22 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8cffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x8327}}], 0x400000000000284, 0x20004bc0) [ 513.858184] FAT-fs (loop2): Directory bread(block 128) failed [ 513.882874] FAT-fs (loop2): Directory bread(block 129) failed [ 513.894073] FAT-fs (loop2): Directory bread(block 130) failed [ 513.905297] FAT-fs (loop2): Directory bread(block 131) failed [ 513.911562] FAT-fs (loop2): Directory bread(block 132) failed [ 513.918177] FAT-fs (loop2): Directory bread(block 133) failed [ 513.924267] FAT-fs (loop2): Directory bread(block 134) failed [ 513.930644] FAT-fs (loop2): Directory bread(block 135) failed [ 513.936807] FAT-fs (loop2): Directory bread(block 136) failed [ 513.943193] FAT-fs (loop2): Directory bread(block 137) failed [ 513.962607] attempt to access beyond end of device [ 513.967629] loop2: rw=2049, want=311, limit=128 03:34:22 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x4000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:22 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb21}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) socket$nl_crypto(0x10, 0x3, 0x15) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1000008000) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r4 = msgget(0x1, 0x20) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000280)=""/135) recvfrom(r2, &(0x7f0000000340)=""/178, 0xb2, 0x40, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x80) r5 = accept4(r2, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='gretap0\x00', 0x10) sendmmsg$unix(r5, &(0x7f0000006180), 0x1b3, 0x0) r6 = socket(0xa, 0x1, 0x0) signalfd(r6, &(0x7f00000001c0)={0x4}, 0x8) ioctl(r6, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r3) close(r5) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @broadcast}]}) clone(0xf11f00, &(0x7f0000000000), &(0x7f0000e32000), &(0x7f0000000040), &(0x7f0000000000)) 03:34:22 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x4, 0x1, 0x3}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:34:22 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x806], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d01000117000000000200000300"}) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="f8f550e6", 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}}, &(0x7f0000000040)=0x100) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000040), 0x24, 0x0, &(0x7f0000000080)={0xa, 0x894f, 0x3, @dev={0xfe, 0x80}}, 0x1c) 03:34:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x600}}], 0x400000000000284, 0x20004bc0) 03:34:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2f03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xffff000000000000}]) 03:34:22 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8fffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x8302}}], 0x400000000000284, 0x20004bc0) 03:34:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2f030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7fffffff, 0x84000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000140)=""/86, &(0x7f00000000c0)=0x56) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) fallocate(r2, 0x1, 0x6, 0x20000005) fallocate(r2, 0x0, 0x0, 0x80003ff) 03:34:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000100)=""/75, &(0x7f0000000080)=0x4b) [ 514.220796] FAT-fs (loop2): Directory bread(block 128) failed [ 514.253277] FAT-fs (loop2): Directory bread(block 129) failed 03:34:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x400300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:22 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x86ddffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 514.307134] FAT-fs (loop2): Directory bread(block 130) failed [ 514.341567] FAT-fs (loop2): Directory bread(block 131) failed 03:34:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x4002}}], 0x400000000000284, 0x20004bc0) [ 514.366257] FAT-fs (loop2): Directory bread(block 132) failed [ 514.395700] FAT-fs (loop2): Directory bread(block 133) failed [ 514.421721] FAT-fs (loop2): Directory bread(block 134) failed [ 514.445720] FAT-fs (loop2): Directory bread(block 135) failed [ 514.464654] FAT-fs (loop2): Directory bread(block 136) failed [ 514.475665] FAT-fs (loop2): Directory bread(block 137) failed [ 514.500813] attempt to access beyond end of device [ 514.505852] loop2: rw=2049, want=311, limit=128 03:34:23 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xe803}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:23 executing program 0: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffeed, &(0x7f00009ad000)=0x2) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./control/file0\x00', 0x0, 0x80) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) lsetxattr(&(0x7f0000000080)='./control\x00', &(0x7f0000000100)=@random={'user.', '\x00'}, &(0x7f0000000180)='wlan1]\x00', 0x7, 0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') chown(&(0x7f0000000440)='./control\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') close(r2) 03:34:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e20, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffffd}}, [0x5, 0x6, 0xffffffffffffff80, 0xe92d, 0x1, 0x8, 0x200, 0x1000, 0x1ff, 0x8, 0x9, 0x3, 0x5, 0x800000000, 0x8]}, &(0x7f0000000200)=0x100) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x800) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000180)=0x2, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="60000096"], &(0x7f0000000340)=0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$getreaper(0x2d, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:34:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x84ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x6000000}}], 0x400000000000284, 0x20004bc0) 03:34:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xf4ffffff}]) 03:34:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:23 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'bcsh0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0xfdfdffff, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20500, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:34:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff8c], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xff0f0000}}], 0x400000000000284, 0x20004bc0) 03:34:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f1687d3671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffff7, 0x10200) sendmmsg$alg(r2, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="eb4330db8392555d9740b23b8dc86d40d8d00fa3c2b4a9d71c091cd05d84533187bbbf72d617976ecd4246c260941246fbc3b04c39e8eb512628c7ca013f6eef2e11ba8905bc4a286c3d76a360a77b659d1700a2db96bbc29c1f1a105563201ec9a12fb73186223f32e87dd06b799051aca4ecb6754200039ecdc8346389d2e7e0206f0e3cf8ac6642419f4d78ab61853dcad78e02d21a0588ce6c248dc88407214c6da6312e888b6f6be4b10221335bb62aadf4", 0xb4}, {&(0x7f00000001c0)="14cc11f35c970f1c03584c95a30e056c6f9ca6bfe789", 0x16}, {&(0x7f0000000200)="fdfdf215e801c95de816068508a7dacdfa35d5c0aae2823275ec3215ef027e55d56c4f12a8388d5b79157e47ecc47d0e0587f49b6babc8046e68d83cf75824ed86f2dcbb4f838f025162a15564a82fe895ea2b8f6c8b21a2ad42f428edf84189f4d9e1b1f43d23af9308fb5c4bef9dfe563c27d750f920e776e0fa3d88793ecf0f637e3f3a7f62ab203de0a5c3470d1ee52be27a685586473fb8dd97008b9c55d9a1f7d848afb78c927837d534cc23cd6091683be9ee7977d75e199b5c8fcfdb2bd6d7", 0xc3}, {&(0x7f0000000300)="d9306784a1fb2f3328f4eba2ba6213559544563ded090a2b8ae521e20ab583d5097313a8e8427fdcf60a80ea2bea06e3d1c3d6d7cfc3a53551b62d4f58c7e86b2396484da427f0480b8bf81c943d4bb9c69f1617c044daff2e53535c94c692bfc839e3cf58cc8ebd86651f400a3799906243b979d09cb6e4f6a618", 0x7b}, {&(0x7f0000000380)="336cfd1c02ea6c8115d3e46bfc27f6ddfbf8eda37dbb714147bc480f5dfacbe16363da6420503680ceaa90aeb6d24dcf9a254d7f3a022c5d78e18c3274c735116b919e7280e78e8b42ba1b0b0eac84faa6af1abe11b709b87d93e1500f7b5fbefcf11d", 0x63}, {&(0x7f0000000440)="301e5bc2f9685d10ef", 0x9}], 0x6, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x98, 0x117, 0x2, 0x7d, "97946036145b55188822d664c8fd86e0655dcf3ecb5ae7911881957a8ff0df71d393d0705040d262b5312b0018d90d241a80ed053fababe43a07909653dad0bf50476f9bd197d0d6bd5913c3d9759c8cd998da8815307937f6a81c43af90e6c73dc0b6ec7e5a5f15d9bc98ba1b9f8eb1ff8cf7d85a7de03438f1f6c16f"}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x9}], 0xe0, 0x4048000}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="f413a971baf8d67a038971871240fd5c8d2ef924e8f2e3fab70065d277c7506322dd582fa1a10e465d96963c6895beac0f048b3e9de2435ddbdab317aaa565a50940794f2aadd63c6777ef4f66", 0x4d}, {&(0x7f0000000680)="1240f9949e60b6f532aac0631aab0ee13b1038a5668a4d697d3fceb7721283b0f2aae604c9681251f36ecf5956f7bc066d3493b6723b33a612a9", 0x3a}], 0x2, &(0x7f0000000700)=[@iv={0x18, 0x117, 0x2}], 0x18, 0x20008040}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="7a2cb6b77095a2b8e0b1b59c32bb3bb83c", 0x11}, {&(0x7f0000000780)="b9f5710dafb7d6c6a73683f493f194230e8aaf058b7315cf2d39d3b9c436d0eb22f210f91ba974065fecbff410270fa0e5aabf19f032ac59a7e16db5aa1e12d5a825a9b93ce4aed9e20f01b53eac049ea9b1bfa0a64b4093c565fd18b6512d5027492ff84b0321630138", 0x6a}, {&(0x7f0000000800)="fa114bd716af038809e8854b8e6234aca99acd17261752c67fb77539ecf63361d67f4066ee08f75345122e4496763673a5a1945383b361895c4b22aedd8296aaf33e52e3706539aca50e67ef729958a398b06531a4626756f1980a0486c9ed28cd9e8f04", 0x64}, {&(0x7f0000000880)="bc145fa97c34d4648d5fd12d70fbb6cfd84839e2fcc8c7ddccd218929098d8877d571a694fb1da48f9b3e02332366f350377f2c85c10739924d866c26c97c67bef", 0x41}], 0x4, &(0x7f0000000940)=[@iv={0x78, 0x117, 0x2, 0x5d, "2704edce1459408f82c907479aecaa292b82525bdc9b9a99e9a9d37557ebe83f60477ed775a6a29f90c41b92acc0a2fc9a794323e6d61f2baeb549c43a2aeaed858ef43cbdce4258797a700fe716e6112a953bba72ca1506c5c4d60991"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x110, 0x117, 0x2, 0xfa, "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"}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @iv={0x18, 0x117, 0x2}, @iv={0x40, 0x117, 0x2, 0x2c, "eb23526f80c11cb63aa427166772f51a7ce513a3222c7c17fd0e606f0535015172dfb8826918586bea606452"}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3}], 0x270, 0x1}], 0x3, 0x4004) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="d556b6c5820faeb895298992ea54d60004002c5b534c90c2", 0x18) [ 514.931619] FAT-fs (loop2): Directory bread(block 128) failed [ 514.952897] FAT-fs (loop2): Directory bread(block 129) failed [ 514.964508] FAT-fs (loop2): Directory bread(block 130) failed [ 514.987867] FAT-fs (loop2): Directory bread(block 131) failed [ 515.010165] FAT-fs (loop2): Directory bread(block 132) failed 03:34:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x543], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0xc04b0020}}], 0x400000000000284, 0x20004bc0) [ 515.043592] FAT-fs (loop2): Directory bread(block 133) failed [ 515.062902] FAT-fs (loop2): Directory bread(block 134) failed 03:34:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff84], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x9000000}}], 0x400000000000284, 0x20004bc0) 03:34:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x2800000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 515.099397] FAT-fs (loop2): Directory bread(block 135) failed [ 515.135064] FAT-fs (loop2): Directory bread(block 136) failed [ 515.172443] FAT-fs (loop2): Directory bread(block 137) failed [ 515.214062] attempt to access beyond end of device [ 515.219131] loop2: rw=2049, want=311, limit=128 03:34:23 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x200000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:23 executing program 0: io_setup(0x8000, &(0x7f0000000040)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x10bc00, 0x0) ioctl$KDENABIO(r1, 0x4b36) io_submit(r0, 0x0, &(0x7f0000000080)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000), 0x4) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f00000000c0)) 03:34:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x700}}], 0x400000000000284, 0x20004bc0) 03:34:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8864000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xffffffffffffff7f}]) 03:34:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="600000ff9685efcc6b3c70b26cf9db0afd4be79d1bc05356d9a8fb1b4dbed8741a401989547e15ef4606264286c616c458c0ad9da83773f810de2891b4422ca1067d86d920ffbfedfe84226269eaf7e961"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r0, 0x3, 0x1, 0xe4d, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@dev, @remote, @multicast2}, &(0x7f0000000240)=0xc) clock_adjtime(0x0, &(0x7f0000000140)={0xcc73}) 03:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:24 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x500000000000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x7000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x240}}], 0x400000000000284, 0x20004bc0) [ 515.768949] FAT-fs (loop2): Directory bread(block 128) failed [ 515.804152] FAT-fs (loop2): Directory bread(block 129) failed 03:34:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xfcd2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x480000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{0x6, 0x3, 0x10001, 0xeef, 'syz0\x00', 0x7f}, 0x0, [0x6, 0xfff, 0xa1ad, 0x1, 0x80000000, 0x2, 0x31, 0xfffffffffffffffc, 0x6, 0x9, 0xfff, 0xbc3, 0x10001, 0x5, 0x8, 0xffff, 0x1c1, 0x8, 0x4c, 0x4, 0x8, 0x6, 0xffffffffffffffff, 0x881, 0x2, 0x1, 0x6, 0x8, 0x8, 0x1, 0x0, 0x33e, 0x3fd972c2, 0x990, 0xe0, 0x1, 0xff, 0x6, 0x0, 0x400, 0x7, 0x8, 0x787c, 0x1000, 0x9b, 0xb661, 0x1, 0x100000001, 0xffff, 0x8, 0x5, 0x676, 0x80000000000, 0x101, 0x1, 0x4b78, 0x1, 0x6, 0x106c, 0x3, 0x7, 0x7fff, 0x20, 0x8, 0x8, 0x101, 0x8, 0xffffffff, 0xffff, 0x9, 0x1f, 0x6, 0x2000000, 0x6, 0xb0, 0x8, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x6, 0x0, 0x9e, 0x4, 0x4, 0x4, 0x3, 0x100000001, 0x0, 0x66a3, 0x0, 0x5, 0xffffffff, 0x9, 0x6, 0x9, 0x68ae, 0xce2, 0x4, 0x101, 0x20, 0xf8a4, 0x8, 0x101, 0x1f, 0x6, 0x3ff, 0xffffffff, 0xfff, 0x40, 0x8, 0x20, 0x8000, 0x2, 0xffff, 0x400, 0x100000000, 0x401, 0x2, 0x38, 0x6, 0x3c, 0x7, 0x0, 0x5, 0x2f, 0x8], {0x0, 0x1c9c380}}) mkdir(&(0x7f0000000140)="2e2f66696c65302f66692e652bb5", 0x0) stat(&(0x7f00000005c0)="2e2f66696c65302f66692e652bb52f66696c653000", &(0x7f0000000600)) lstat(&(0x7f0000000780)="2e2f66696c65302f66692e652bb52f66696c653000", &(0x7f00000007c0)) [ 515.841281] FAT-fs (loop2): Directory bread(block 130) failed [ 515.878698] FAT-fs (loop2): Directory bread(block 131) failed 03:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xffffff9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 515.918478] FAT-fs (loop2): Directory bread(block 132) failed [ 515.941707] FAT-fs (loop2): Directory bread(block 133) failed 03:34:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x80ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x3}}], 0x400000000000284, 0x20004bc0) 03:34:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x1, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000200)={'gre0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000099ee75555834ebdb9dfeb6b1d747fac0e786bc54633a84d75d70d8a098acebf1b513ddb2229c444d365dc6b46889d7ad0879da1eb046a606488590990687533f4ec08aa13a4430ca173af1ddae4c04ee3ba88d17ca93f37b"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x5}, 0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="600000ffd6add2f6614ad413459f2ff0088fcdabf0149f016563d655d5dd3c9e520580454d5d45968985bbb8ec1f3ca1bbd4ad2eed76a707247f3a3cb34e5e034189ab73ae1de0274e025575"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 515.965580] FAT-fs (loop2): Directory bread(block 134) failed [ 515.988213] FAT-fs (loop2): Directory bread(block 135) failed [ 516.023494] FAT-fs (loop2): Directory bread(block 136) failed 03:34:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff8b], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 516.116168] FAT-fs (loop2): Directory bread(block 137) failed 03:34:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x50000}}], 0x400000000000284, 0x20004bc0) [ 516.163616] attempt to access beyond end of device [ 516.168736] loop2: rw=2049, want=311, limit=128 03:34:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xfbffffff00000000}]) 03:34:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4f1, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000002c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) chmod(&(0x7f00000000c0)='./file0\x00', 0x45) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) pwritev(r1, &(0x7f0000000080), 0x0, 0x0) 03:34:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x89ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x83020000}}], 0x400000000000284, 0x20004bc0) [ 516.383310] FAT-fs (loop2): Directory bread(block 128) failed [ 516.413739] FAT-fs (loop2): Directory bread(block 129) failed [ 516.432331] FAT-fs (loop2): Directory bread(block 130) failed [ 516.447407] FAT-fs (loop2): Directory bread(block 131) failed [ 516.461438] FAT-fs (loop2): Directory bread(block 132) failed [ 516.471495] FAT-fs (loop2): Directory bread(block 133) failed [ 516.477670] FAT-fs (loop2): Directory bread(block 134) failed 03:34:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x80ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0xc04b002000000000}}], 0x400000000000284, 0x20004bc0) 03:34:24 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xf5ffffff00000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) [ 516.483799] FAT-fs (loop2): Directory bread(block 135) failed [ 516.490446] FAT-fs (loop2): Directory bread(block 136) failed [ 516.496733] FAT-fs (loop2): Directory bread(block 137) failed 03:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 516.526083] attempt to access beyond end of device [ 516.531112] loop2: rw=2049, want=311, limit=128 03:34:24 executing program 3: r0 = socket$inet6(0xa, 0x80000000000801, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x7fffffff, 0x1, 0x0, [{0x9, 0x7ff, 0x4, 0x7, 0x5, 0x3, 0xfffffffffffff801}]}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "1cabe78754a539d39cabd6a40fa8c8aae3fa0000000000001c0525fec2541ebe2eb41f000000cabe9e068db78ce565aa9a9d325ebabd627afe7a54cdbd779b"}, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x400000000000480, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000080)) 03:34:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x500}}], 0x400000000000284, 0x20004bc0) 03:34:24 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x3000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:25 executing program 0: r0 = getuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents(r2, &(0x7f0000000180)=""/190, 0xbe) getdents64(r2, &(0x7f0000000100)=""/66, 0x28b) getdents64(r2, &(0x7f0000000df0)=""/528, 0x7f355eb8) 03:34:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x8008}]) 03:34:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00wiU'], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x80000000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000001c0)={r5, 0x46}, 0x8) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x10300) 03:34:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x20080a3, 0x1a, 0x0, 0xffffffffffffffff}) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x125000, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x101000000, 0xa}) 03:34:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xd502000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xff00], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0xf0ffffff7f0000}}], 0x400000000000284, 0x20004bc0) 03:34:25 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x6c00}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xd00], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x600000000000000}}], 0x400000000000284, 0x20004bc0) [ 517.028896] FAT-fs (loop2): Directory bread(block 128) failed [ 517.066356] FAT-fs (loop2): Directory bread(block 129) failed 03:34:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x9003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:25 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vga_arbiter\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x0, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000007, "010f010000000100", "88e7ed00000080000000001ef6c699f539e07ca19ab52389861ec9db7fd918e0"}) write$sndseq(0xffffffffffffffff, &(0x7f0000042f70)=[{0x0, 0x0, 0x8000000000, 0x0, @tick, {}, {}, @addr}], 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000015c0)={'nat\x00', 0x0, 0x4, 0x14, [], 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000280)=""/20}, &(0x7f0000001640)=0x78) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000380)=""/4096, &(0x7f0000000000)=0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000001540)={0x0, 0x2, 0x7b, {0x0, 0x1c9c380}, 0x6, 0x3ff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r3, 0x20, 0x1, &(0x7f0000001480)=""/141, &(0x7f0000000180)=0x8d) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001380)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000001780)={0x1, &(0x7f00000016c0)=[{}]}) r5 = eventfd(0xae) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x14) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x4, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x0, 0x0, 0x5e, 0x0, 0x0, &(0x7f00000002c0)='veth0\x00'}) [ 517.099691] FAT-fs (loop2): Directory bread(block 130) failed [ 517.139449] FAT-fs (loop2): Directory bread(block 131) failed 03:34:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffca88], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x208100, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r3, r0, 0xbd4}) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="60ec3d0000"], &(0x7f0000000340)=0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000001c0)={0x4, 0x24, &(0x7f0000000180)="2bfcb91907830b4d9e8b3fb8856c20739e8803a24fd853ccf47a312a274ffe314ee35350"}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000240)=0x5, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000200)={'\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000000)={0x4, 0xfffffffffffff5e7, 0x8, 0x2}) [ 517.179242] FAT-fs (loop2): Directory bread(block 132) failed [ 517.196226] FAT-fs (loop2): Directory bread(block 133) failed 03:34:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x83270000}}], 0x400000000000284, 0x20004bc0) 03:34:25 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000180)) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x29, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff88, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x84440) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 517.246427] FAT-fs (loop2): Directory bread(block 134) failed [ 517.285169] FAT-fs (loop2): Directory bread(block 135) failed [ 517.325316] FAT-fs (loop2): Directory bread(block 136) failed [ 517.366051] FAT-fs (loop2): Directory bread(block 137) failed [ 517.423872] attempt to access beyond end of device [ 517.428949] loop2: rw=2049, want=311, limit=128 03:34:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x390, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x3], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:25 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x600210) r1 = gettid() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/145, 0x91}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1a}) tkill(r1, 0x1000000000016) pwritev(r0, &(0x7f0000161000)=[{&(0x7f0000000040)="f5", 0x1}], 0x1, 0x0) 03:34:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x4002}}], 0x400000000000284, 0x20004bc0) 03:34:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xa66, 0x8000, 0x10001, 0xdf, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xb78}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x7, 0x1ff, 0x4, 0x887, 0x7, 0x80, 0x0, {r3, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x1, 0x84, 0x5, 0x1, 0x2}}, &(0x7f0000000280)=0xb0) socket$kcm(0x29, 0x1000000003, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = creat(&(0x7f00000009c0)='./file0\x00', 0x108) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000a00)={0x57, 0x8d, 0x0, {0x20, 0x8}, {0x4d, 0x3}, @period={0x5f, 0x4, 0x1f, 0x40, 0x200, {0x39f7, 0x1, 0x1, 0xffff}, 0x3, [0x2, 0x1, 0x4bb3]}}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000300)='./file0\x00', 0x100000001, 0xa, &(0x7f00000008c0)=[{&(0x7f0000000340)="6d0b6fe51a2eb5cf974cd2d7f105cdabf204e756165f5b49db8c72b3fbe9694957182ce8517f8347d83a309d1a791f51bb7441814594c0c85a4e0bd893a214105e13f8dd9af03aab16ff1929dc4333cb95f23b4f13ee7ad47b2aec17aebf131db179a919b3c577afac69948437c298c23bdf3fa93a095524088ecd24c4dfb29464b548656b73334b612455ba99d4477d0018e121c3508d82673c2b04ccedef8a119382521dbba357eaf735b132c7b19e6fa009d98942004cdc2f98c0e976441a8decd404a38ca892ce8338b1aa7dd44a4f20acabbc3949528921ff853e95e3b55eacb8d4c8e2d61cc754b34102403a", 0xef, 0x1000}, {&(0x7f0000000440)="ce51f0a59bb26a220e2370c6", 0xc, 0x9}, {&(0x7f0000002040)="fa2d1ae80871835de13db3ab71e6bf37b5252f76d4cab075126c99b0b2feea0b478939850a9be9dbf65f1e5e3e89d0e9500db51088e41d0aa13f832a8df7225146aea92b9f768d1e4b2283679eb03a53f2383f3a20d317005225bf42b14fbe76854caef8b120aa0a7902c87f7815b65aaa0ae1de2b472726e64fac7de2ddf098d806f29bf250eae6f2644bbeae845fb0b6634f73a7a2c1f95fc8f28649855a30050204ea3de64706ded07d3434292b47717f503684cd9147d1d073c76176f98d1592fda7b136280c83cb9a0b47a020fbf6aa0ea3a587a7bfb62d50a7378e9b79af3a828d3ed6b7d32fc654c7f714195558f2e5476cc051fb12fc8c22106b3352a75030cdcb36b5e2bb4c18e1d0bf6971d1e60bec386602ed368d358f6c2d3771c4a1852a46321618fdfc42b09e7cc11720d491ac7daf36a3905e8c8525cc4f3d3eddbfbee01ae245701917a9a1cd91e258e1b69bc98ee3988e313db21d6d478725ca2a4407cbc51be8a93c1f9efb2b4ae838489861fb77c23761544702bfeef18a47255bfd7d029c686894403dab383ea3b19995af03aefddfd0ff3bf85a9a5fc9e04093a67237b335aedce0001d00851c1db1c4fd5a97c0aff78443ace4d694dcf5b712cf470870877b0b7d1d867f875a3a56dc59469bde54e8360e3e92014550b043e2eb2288c0a1d7f1a134b9f6d8a4b3066f7dc8e74b5581e30f6a4fff108a0a25adf90b2ff204eb85ce235d4763ea6739a711e5c4a2b6bfefa589628decaa839089c083b6229ae14a6ed9bfb659714ae01b0dfb90c3d0d1c42586bb4415cb61d6d1e65bb5b19dbca19992f41d40e3d9902ae0ee3e520b9d0e6ccecf318b0f72cabf0d4decc5d641dcae99dda4fcac5540ff0eb741d887815aef1e880672d422be52334bd66e2255c093d1d3a93efe4057ae3f1b88a3dbec92223760fc7fed4cdd390b3d22fa2063379dec33ad8d97081a6066be728ad9f5f18d30bf9386d2cb1662e4a76511c37877fc58633f809fbed4e259f66eeec034f8ee5a0d1e578e4dd5492c442d8e439fa7e5929e42b8a9a024eb84ad1ce789945d3a268feafcdba99e4355c5cfc51bd3b6183995977090da40aa7b8a5301c277b3e7451cea5cf5e70feade3af2476e51cb3746aa5d8396b827351168436c4fea8982fd74386593f3d81ef1c5cec0892499bc3aa0109d08b1a943923757c7ae29deb104c546c59014a65b6196d0f99f247ede2b374103711b5f0325103b22530bd149dbd14e699e3280863125d03ed4ca31f96bdfa0264665ce3c016aef66cdaedbe6602111e71cbefe37c82260f8bdf29633f0c9425460a3e8a6c8efd5b02b5e15540a33bbd258c24d212c2cd95b3415148f885b097cbe1a63785d5c6a9d7317c079bc4654c9c7c519d1605c92d75655743699934cc20828e2854ddb410c5e43dba03f2dfd0c98e933ca5dbc60519665755e582714071a8c6d9b9eed867ebd9f1663fd0f2a736647ec0ff183fbdb7ccdf5d16ec4a344964cc4683179194630a55f0aca48f0ae34da9b13589a28e543418cbd3bf44ddd19996255e7d91024426d34030b39b09ba72d5fa24ec22a5cb333f8010f4c28312dc9bcb741253987b98eca0840b924eb8702a51f87db32d5049e7aaa08922ac0b37e4e8e82c2e8a10f99f0b7b4b0f56c881d37b597b61b8d226e486dda7e61f4c0ace9df2507756b96cb5f6403215552c72a62f6f4b4b4acf1080cae31af30682898c15cd96d0461dc8e0433188ecedd9e7d6c97c334ca8cf233ab924d6585530a1e7359ede8006ec3e978ac969512390ee562eec26fd5626f96e0c7d4ecbb9515b24a9a88d0473a4688f2a51decade6d230ef524304ff49f7349b6fc63c8fc9313a2a46066072bb0f75bb50de8d1b32926c96f1ad5e075ce5d78af2a80d00994e58c51fc07482b179a17bb24c25f02986b7ddb81bb69f2bf8f9866d99a2aa4175e7d7da2da1c4ecd4671b3e1ef9a81e193cb49af2336da7d884c610b29e3cbba3af38b687ca4782c08d20771f40f8beb38c9d4053518372c5a8552a57c44dfd1d3160c9ecef7ec9b601204d332043f20867074a75f601149014a98b9c4425c76e262e88062fd708b7c251e87f8018ce9ba81ff381a9acd82b0e877012b9b514436db96e01b39a973bcd1a0bb35e4da11208563c7b4de0bd615a1c6875d9ea73dcf78c2add981f01c084ebebfb8fbf135862d477c6622b7b4f5b177b0127696b0035a94daeada17261b7ae58b61b06568f4a0c8aa39837c91183ac54e32a4f245a75f2e4ccef6a669fc178c91fa6199983822223dc21c61816ee00d4d9612c0bb6f4537ca6a1355ccb0f5c837cc315108962f7c95e287c41bac9388a02c23e3f6bdea5e6140b799d4c378f9059a34d70953ec29151b0b08bc34c4a5c6b6c1d125715e184196475c6dffaac61630860f42a7cd4af8c164b32fdaf032f995b5271bbc51f4970ae7dbaa35a1dea44c02facca1346b5643905dba6316c597baa41cc4de936a2b66a4abb721bc63c2007253d327a2251251d40bc06833bf48915530e4efbe87b43f0b97688c0bf1f8acb2bb19e3eed80df92441109cd331d9a2bf7e7ab1abfade5cac3080a548e300acf0507e96dcd6c81793994a60d49fbbd3b6e107402a3f972a307fbb2893043eaf6645d09bc63b554a251dafc80884cb6da3c2f4cce1cabf3235b0da109941ec08747ff3ca6479681a5ea2c90677f22c00c8d474bb3a9fd29d0e38bb6751916171ef4d0ac01cf52441c685f75d629379d593d9bc85b5e8306d3612a2d3fff97815c96a4ca35cefc3bb8906ebf666845040e4ad5dc0156015051031f9919ed2128427a6bae705f117cde56553f696bcf89817bd25b02cace80acbbc568c7a98b9a7468f458ea2989f339dc1064c8461e016e05426f93440f40a4e7f7bd27d16e15cd075b7555465d724404498b324b5b63b0929ad8ccc7f3afb69bfcd35ab6b39eb3fa9290cb0d415791a3ef1692c4a1e9bfe44875a2dcce201c117562c018fd5a0bdd8119ca3e1e4753616855cff2a61cd56a405495e7414d74a3125ee76b83dc76ee95922045e20e1e9faa69b885964529f34835e5f4f54323184ce43fbf353ec7621c91573e4c96609af50f63cafd4166424f459ee69c42af830820eda049deb7f3c01eeb7e3aa4cceb78182e13d9f8ae684c991db2749e70145b7d1beae5091a1fd338d3cbb429cd92bde8d1a3f0e36781e5495456741cf67ba28dcef9c473d6f211111e941b7e30387f12b32315f8b886c00a3a6f43ed69ffbc0b112aaa2761622fbf4342d0268bd6e5a6c1576aca673ec220949eb70cefffa8a4a81d901b935c5cad1e812b2cb491412d40b4315edf80487cc66dc4aba14d150bdccee5a90ffc17c297f301ec60d818f99db5a112ad192b7c0146820f00c9ea2814ee7d714887087f4216c6d39285addf920506afd45e9aaf51cd2badd126aafff7e98f664a31dcb60252756f7db7be592e3a7d71add8d71f3551b1f09d5c4c7f3fa6b5f3a5c44c0ca8533a3f93898088a93a57241ae63f8f3a97725effda8d82ad4cd46040ada4f3e0b33319899da5c2fc3eabf197616a87e2d0f4850d58493301e7bb0fd8372ee719a69b918555f079b606971eb072ba6c6fa19aeee05a65be124aa5718f5d50f6d837aafb7ed7bf2273562eb871373f311545932229aa6ffe94e280ac44d3ed3380a51b9562453f110f78a7119766b85f77ec02d7e87afa09d7cc4fa5c7d3d832a55061fe87b2b2de51fad053ae516caa06a734a6d357963fca0cca6f19098f81c25fb9c7134a551d7470522d03e25fd54736c57d6e8e58089546a3baaa67ee65bd9224bc50c13c3cc399d34f4a93a77e93d1729280f2197f722b94884f2ef1a25e5498045105b11c71e5c38a5de619e2f3eaa1aee2a5e867f42d16cd12af795fd41da590feaa4345074391fe5389e28ae7d6f75731d581e481327c7253b3f3c2c62e66551f0368acfefe292252277ccccdb5e94a148d76de1900e44e117190a6ebaa4567da587394d2ec4253dadcf66ea84cd51a10d955da0d586048d7457012fcca6f60b4e79240a285c6e72e291d4189f5c2111004d20e0bd4eb7d03a877d6f3926a320f678dad2decc5082c87dd13a1e83ecafe44bdc308fb2131b6de10afedd7cdbf7cb8fe579634d631addc2a2320796ba8c7bbeefd3a048ce68a5f907d5772627a0fb0bc99bdc6a4823af2e3b5d3813dc60a66cd190ba842e24c62553e7295bdd36a98ebb734133d41a27aaaf3e9e06398ce3b2ec60bef570b1166665bf8babd343390857b6dfadcea2bac5fca2c00ca77b7a8a93b2f97a9dc302f40e5dd5d45750ef02faf1ffea32a4a2bd32913771f04b16c82a852b3f2cee69e33252007f47cd494161f187024ff355100cb3e5e09454167da20e0a74c83017fcfd622dc665eb8b69b5219b849f7aa42cc52e3f0507cb8fd1b94285e949e1e5d1036e825874767017e8914a2f39bf0be15e6788d804a8d7526a0f8d25e54657d7eb64b4be4bca2bd66301936b49368f50f26f480f9f769ebb7933a16e11a059a0fabc93c0ecdee06cdfe76e115234c42be076959494bf409ba94650c6c6b5513258905347fc579bc451e14dcfcf134b80c5ce6a63b912b01d8b5c3ff82564b31fc6d53a2a877e22359a3375d1c5aee703bad91be372cc38c981ac110b586511a121c5d51bc1b39f4e56dd402e6f470d7aed3b650efc5672870a1dab487f2583ccd317dab7c700a6288f38d163d50b50081260fc2b6d722bcfc0a4c2e3e36afaeb0d5e8e4ee07f085ade26472a5a00ce409b6ad1a3398343a9a1d84962a9dab9e0493814a456f7f21aa19925180e6c59b2adeecd1709cd5dddf9789f9f1050c80640190bef55aa30009f98c3b2638305ceb26022066f495f79874897a7f8cd8d8080cf164e0aedffc2b5a1900fd104422dc99a08b4d1fd2c014d8d3615f18cbc319b29ad48b58b382b7e7802a1598f33327c67244ff7d09367f4d1a360db2cf4467f934b365b74a2a596eea9931303275551de7bf4a6f33d12193a7c344a6ba7fee9220f43946dd802555e16692ef7934cfe59e9b18c682060df11617e43256c616206874235a5e53dfa4b518f52a6d0330b612e0444aac392993e2e4214eb61c5b7ae1cdf7ea67a7386a0529186ae30e79ddd5b25ca6b09ac0dc790e4fd5d04cc9e613f28f428864eaba1c27c074c87ec7170aa04ef6dc02c9fccc84206685f8c14ae5e14d4431ebfdf808adf926560d4ba35f990336c27e21e9a0d8be27b7ff330e03697f1fab3149b12cd2712acea52becfc41e099abfa9053b8ad9e1c6d5559c4be28d3b4215049297bc6fd4fd7e0a9913f1a1f19cdda22afb9de7f7a1571e972125600a13b70679984cec976a8de6b5c792eabcfa301be9485ccb436cb41201e59f68c397500d09775bde690e9798658ec69402e5098148b614dd2e7039ebed51a1e609182c72522cd120819ea6322fcc6a3054f5b3709a3a4386e415b6a718358ba58276d06dc60f1ff3f10bff2caed3918faba7600c1f97abab06a85f52bd62f91ce959a950794df5f03bfad7e20803602b8f76af806c56ea41a19b196b044c38611585965f5571209d4d666071fd00d9cb970012ef6492747e4a8d406e233874ea1f4bb6f60865b4679cb0cc0b5e0283701b459454fcd4757701dc8d338ac3642b160ba551423a5389463b7973345952ec4a99201e8d3236ccc0ad03ce13a4f3475c21ad7d3aeeadf16afd70198ec93794b9698d3e4f113045aa14fb0ea", 0x1000, 0xcf5d}, {&(0x7f0000000480)="83ddf858a7dbc1aaa7165ff98ad9a3f8d5d6b153022b202d78c2f3b0077f94b677e6c51b2a653019199c6ac801143f58dbc5d75d525d57b02c5b4f79b5a5f43cd569a1b6b1875942a3298bf88e99832336a6f98fad85eae2725fd83a9c55a35f0caa299f55dbc9714758509ba8871eacc4925a85c39f88f55a5c174a4a9dbcdd64ce881ce14dc22507d1be9183f9d83c34588bf2", 0x94, 0x7}, {&(0x7f0000000540)="21173998fb733fb2c7b74de4b7e6e3f4518e7c4bd994aa1c4917d6a7c8d2b779891943006bf507cb399c8feb434d84398e628352e0a8c59f1a5c79e21926e372f6948ff9f1801c9222171cdf40d4536b37403bc07487a807cdaf0a0f9c551398f7c8e28411c3852e29477a9ce79ea1f388855c221485329f4b4eb16c99e97e5b37b043b3556a", 0x86, 0x5}, {&(0x7f0000000600)="6b3b4c9190ced2b6397335f2fc37049d78871abbd7db309b990e22526db6c9afd7855bfcfe5137492bc0f00b35e3d6cfe14fcfdc9f8cc8260f400ac68f731606715423a0af704f28b7f032f4aec75d2af5e7d2d8db17c1ca5531b4dd7cbda8bf662cfaa9b84e53ed41f44ba52af28e64a57c7d2e3fc46de4ebd87b45187dbcb0bb1999befc21d93312b623aa37bce2241349b479", 0x94, 0x2}, {&(0x7f00000006c0)="986ac9c83856decb8baee4821f086e0f10207dcf4cd3aeca5fdd93f358db65ea7d9b06217c49f0b5e05374248ad8203964c56729f950668e75", 0x39, 0xc2}, {&(0x7f0000003040)="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", 0x1000, 0x9}, {&(0x7f0000000700)="c15d", 0x2, 0x10000}, {&(0x7f0000000800)="00aa86539060b9020a0988419098e4247482045efce660b2cfe236c9cfc214483654e4541ae548c6f0e910aa6d168a4a358856300a4d77aea692c2ecb75a37c45dfa7b6ef06bfb452053e95b40627c39314980a53db3109726100dba58efc4b3fb1208dcf8da47e7690dd69c2ea02b72b4b8d6b7ce97a97a7a4705d8852137cd6ed1aa", 0x83, 0xff}], 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="9987c94a756e6869"]) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000013ff4)={@multicast2=0xe0000002, @rand_addr, @multicast1=0xe0000001}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) clone(0x0, &(0x7f00000006c0), &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 03:34:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0xfbffffff}]) [ 517.636183] FAT-fs (loop2): Directory bread(block 128) failed [ 517.661192] FAT-fs (loop2): Directory bread(block 129) failed [ 517.667332] FAT-fs (loop2): Directory bread(block 130) failed [ 517.675725] FAT-fs (loop2): Directory bread(block 131) failed [ 517.681826] FAT-fs (loop2): Directory bread(block 132) failed [ 517.687889] FAT-fs (loop2): Directory bread(block 133) failed [ 517.693982] FAT-fs (loop2): Directory bread(block 134) failed [ 517.700271] FAT-fs (loop2): Directory bread(block 135) failed [ 517.706545] FAT-fs (loop2): Directory bread(block 136) failed [ 517.712723] FAT-fs (loop2): Directory bread(block 137) failed [ 517.734687] attempt to access beyond end of device [ 517.739746] loop2: rw=2049, want=311, limit=128 03:34:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffff0000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x9}}], 0x400000000000284, 0x20004bc0) 03:34:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x4}]) 03:34:26 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xc0ffffff00000000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x40030000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x240}}], 0x400000000000284, 0x20004bc0) [ 517.931572] FAT-fs (loop2): Directory bread(block 128) failed [ 517.954202] FAT-fs (loop2): Directory bread(block 129) failed [ 517.968013] FAT-fs (loop2): Directory bread(block 130) failed 03:34:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffdd86], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 517.988146] FAT-fs (loop2): Directory bread(block 131) failed [ 518.008517] FAT-fs (loop2): Directory bread(block 132) failed [ 518.023408] FAT-fs (loop2): Directory bread(block 133) failed 03:34:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x4000000}}], 0x400000000000284, 0x20004bc0) [ 518.037902] FAT-fs (loop2): Directory bread(block 134) failed [ 518.057959] FAT-fs (loop2): Directory bread(block 135) failed [ 518.072579] FAT-fs (loop2): Directory bread(block 136) failed 03:34:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x28], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0xe8edff7f}}], 0x400000000000284, 0x20004bc0) [ 518.091622] FAT-fs (loop2): Directory bread(block 137) failed [ 518.129978] attempt to access beyond end of device [ 518.135129] loop2: rw=2049, want=311, limit=128 03:34:26 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x280000, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffc, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x400000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:26 executing program 3: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="30004fb3cf52000014000100000020000000000200000000", @ANYRES32=0x0, @ANYBLOB="04000200ac1414aa080008000000000008000400ac1414aa"], 0x30}, 0x1}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 03:34:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x600}}], 0x400000000000284, 0x20004bc0) 03:34:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1, 0x0, 0x0, 0x8800000}]) 03:34:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:34:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x89ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 518.624179] FAT-fs (loop2): Directory bread(block 128) failed [ 518.660806] FAT-fs (loop2): Directory bread(block 129) failed [ 518.696486] FAT-fs (loop2): Directory bread(block 130) failed [ 518.724204] FAT-fs (loop2): Directory bread(block 131) failed [ 518.738973] FAT-fs (loop2): Directory bread(block 132) failed [ 518.761495] FAT-fs (loop2): Directory bread(block 133) failed [ 518.767693] FAT-fs (loop2): Directory bread(block 134) failed [ 518.774114] FAT-fs (loop2): Directory bread(block 135) failed [ 518.780306] FAT-fs (loop2): Directory bread(block 136) failed [ 518.786655] FAT-fs (loop2): Directory bread(block 137) failed [ 518.809747] attempt to access beyond end of device [ 518.814793] loop2: rw=2049, want=311, limit=128 03:34:27 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x40000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x2783}}], 0x400000000000284, 0x20004bc0) 03:34:27 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) r1 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) r3 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={r1, r2, r3}, 0x26f) r4 = socket(0xa, 0x1, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) 03:34:27 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200, 0x0) accept4$inet6(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x80000) fcntl$dupfd(r0, 0x405, 0xffffffffffffffff) 03:34:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3bffa, 0x8000) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r1, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="e3874b2a614db87342eb4202df3b0a29449e75587170f981d0ba95053c7df70feb87fd23a5fe6163cc6c43ac6eec7812286543c647b1cd97dd89fe9acd6d5c0d80faec7f02b5ba9a0c82805d2e6164110f75", @ANYBLOB="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"], @ANYRES32=r1], 0x3ff) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 03:34:27 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x88a8ffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:27 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8035000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x6}}], 0x400000000000284, 0x20004bc0) [ 519.029427] FAT-fs (loop2): Directory bread(block 128) failed 03:34:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="d556b6c5820faeb895298992ea54d60004002c5b534c90c2", 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0xffff, 0x3, 0x7, 0x6, 0x1}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x5}, &(0x7f0000000200)=0x8) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001c40)="1476beef90b3f62430c69c9fe785015c238ad37c03c9e6659c52c19e2e4a635d74", 0x21}], 0x1}], 0x1, 0x0) 03:34:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xa1020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 519.071367] FAT-fs (loop2): Directory bread(block 129) failed [ 519.093517] FAT-fs (loop2): Directory bread(block 130) failed [ 519.120755] FAT-fs (loop2): Directory bread(block 131) failed 03:34:27 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x82ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) [ 519.153012] FAT-fs (loop2): Directory bread(block 132) failed [ 519.189495] FAT-fs (loop2): Directory bread(block 133) failed 03:34:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x4000000000000}}], 0x400000000000284, 0x20004bc0) [ 519.218214] FAT-fs (loop2): Directory bread(block 134) failed [ 519.241257] FAT-fs (loop2): Directory bread(block 135) failed 03:34:27 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x6000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 519.263842] FAT-fs (loop2): Directory bread(block 136) failed [ 519.286552] FAT-fs (loop2): Directory bread(block 137) failed 03:34:27 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x1100}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x10001, 0x82) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/180) setsockopt$inet6_buf(r0, 0x29, 0xd6, &(0x7f0000000000)="d05ff19278047acb1003cf1ca05eb0a7c0ace8623d5ebe7beaf6873381366686dba5e1a0f2cb0c67ffbf08caa0f205dbdb2993d7ba4c60b3ddf2b584cb6ab6cf028f009c015f37d67b15bd827081e97c80378e9f9b817c8517b9c36c988a5e760423b06523b341798178885442627c2949ff2c5501154ddae973fc4d6db9ee1ffe5a86e0cb48070163a157f099a381c59462008911e6c345ad7aab099daab7fe3b51cb79e49aea2b56556cc28d5105", 0xaf) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="e1f024c91bf6b22b1a17106587660c5af7", 0x11) 03:34:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000), 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x9, 0x20, 0xc5, 0x0, 0x0, 0x100000001, 0x40, 0x2, 0x1000000000, 0x7ac6, 0x9, 0x1ff, 0xffffffff, 0x0, 0xfffffffffffff001, 0x7ff, 0xfff, 0x3, 0x10000, 0x9, 0x7, 0x6, 0x7, 0x80000001, 0x8, 0x49e0, 0x10001, 0x5, 0x0, 0xfae, 0x5, 0x4d, 0xfff, 0x6, 0x9, 0x5, 0x0, 0x1, 0x2, @perf_config_ext={0x1}, 0x1000, 0x7, 0x5, 0x0, 0x8, 0x5, 0x2719ea70}, r2, 0x9, r0, 0x2) 03:34:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x6801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x6000000}}], 0x400000000000284, 0x20004bc0) 03:34:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) shutdown(r0, 0x1) fcntl$setstatus(r0, 0x4, 0x6000) r2 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r2}, &(0x7f0000000200)) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 03:34:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8060000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, 0x7ff}) close(r0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0xc}, r2}, 0x14) 03:34:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r3, &(0x7f0000000140)=""/238, 0xee) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:34:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8847], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 519.945138] FAT-fs (loop2): Directory bread(block 128) failed [ 519.967899] FAT-fs (loop2): Directory bread(block 129) failed [ 519.976715] FAT-fs (loop2): Directory bread(block 130) failed [ 519.984267] FAT-fs (loop2): Directory bread(block 131) failed 03:34:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x700}}], 0x400000000000284, 0x20004bc0) 03:34:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000000)={0x15, "b5835ae21f108bcea0114126cd7a535c0be62f2406"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 520.008899] FAT-fs (loop2): Directory bread(block 132) failed [ 520.015773] FAT-fs (loop2): Directory bread(block 133) failed [ 520.022249] FAT-fs (loop2): Directory bread(block 134) failed [ 520.029129] FAT-fs (loop2): Directory bread(block 135) failed 03:34:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x8035], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 520.077045] FAT-fs (loop2): Directory bread(block 136) failed [ 520.110161] FAT-fs (loop2): Directory bread(block 137) failed 03:34:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x7ffff000}}], 0x400000000000284, 0x20004bc0) [ 520.172643] attempt to access beyond end of device [ 520.177715] loop2: rw=2049, want=311, limit=128 03:34:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffffff82], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x2}}], 0x400000000000284, 0x20004bc0) 03:34:28 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0xffff0000}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x8) fcntl$setstatus(r0, 0x4, 0x6000) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000180)={0x0, 0x3}) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 03:34:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x7000000}}], 0x400000000000284, 0x20004bc0) 03:34:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x2605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x83ffffff00000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptmx\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x6f, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10, 0x800) getsockopt(r2, 0xbe1a, 0x3, &(0x7f00000000c0)=""/170, &(0x7f0000000180)=0xaa) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000280)=""/110) r3 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r3, 0x5412, &(0x7f0000000080)) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', '/dev/ptmx\x00'}, &(0x7f0000000240)='/dev/ptmx\x00', 0xa, 0x3) 03:34:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="3b08e33ff81da75f93e3135685f4b867ce5d3f89ce2ebe7b04a897cf5603e6027f92f68b44fa8bb87fdf98cbe78c470e9cbc9996d3bd6b2e385716a41ba9b36f8edec5ee47dbec2a969e48d590c2b1bf67785e7e9c17df4416c08599e289864f8c50d240deebf1611e60dbb72e5ee000dc") socket$netlink(0x10, 0x3, 0x7) 03:34:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0xffff000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 520.501191] FAT-fs (loop2): Directory bread(block 128) failed [ 520.563337] FAT-fs (loop2): Directory bread(block 129) failed 03:34:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x4}) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000040)) 03:34:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x300}}], 0x400000000000284, 0x20004bc0) 03:34:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:34:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x1500) [ 520.615406] FAT-fs (loop2): Directory bread(block 130) failed [ 520.636140] FAT-fs (loop2): Directory bread(block 131) failed [ 520.647807] FAT-fs (loop2): Directory bread(block 132) failed 03:34:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x81000000], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 520.689380] FAT-fs (loop2): Directory bread(block 133) failed [ 520.700124] FAT-fs (loop2): Directory bread(block 134) failed 03:34:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x900}}], 0x400000000000284, 0x20004bc0) [ 520.751717] FAT-fs (loop2): Directory bread(block 135) failed 03:34:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x85ffffff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 520.823860] FAT-fs (loop2): Directory bread(block 136) failed 03:34:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x218}}], 0x400000000000284, 0x20004bc0) [ 520.868365] FAT-fs (loop2): Directory bread(block 137) failed [ 520.968925] attempt to access beyond end of device [ 520.973994] loop2: rw=2049, want=310, limit=128 03:34:29 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x0, 0x8dffffff}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 03:34:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty=[0x0, 0x0, 0x800e], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:34:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0), 0x0, 0x283}}], 0x400000000000284, 0x20004bc0) 03:34:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110030, r0, 0x0) r4 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x90, 0x0, &(0x7f0000000440)=[@request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x4}, @acquire_done={0x40106309, r2, 0x2}, @enter_looper={0x630c}, @reply_sg={0x40486312, {{0x4, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x58, 0x38, &(0x7f0000000300)=[@flat={0x73622a85, 0x100, r3, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x1, 0x0, 0x24}], &(0x7f0000000280)=[0x78, 0x20, 0x48, 0x28, 0x60, 0x38, 0x28]}, 0x1000}}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}], 0x1000, 0x0, &(0x7f0000000500)="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"}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3c9) fcntl$setstatus(r0, 0x4, 0x6000) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000180)) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 03:34:29 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) read(r1, &(0x7f00000001c0)=""/169, 0xa9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) bind$can_raw(r1, &(0x7f0000000300)={0x1d}, 0x100000369) shutdown(r0, 0x80000000) ioctl(r1, 0x4ef, &(0x7f0000000340)="e800cebc0a390993b321f25cb89a1eb024649d0a7588df3822c33b2503c6de89b4ac84f455b0ff1cdcc0cd06634981382c0fc78c61b6da01cdaba199c938b7cb83e7b772b884e4a22b9669dd578e56d44dfe6625a62b9b15919ceb142830eae21c52332c84ef70a9b918") fchmodat(r1, &(0x7f0000000280)='./file0/file0\x00', 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x480000, 0x0) [ 521.301258] FAT-fs (loop2): Directory bread(block 128) failed [ 521.331233] FAT-fs (loop2): Directory bread(block 129) failed [ 521.349813] FAT-fs (loop2): Directory bread(block 130) failed [ 521.364947] FAT-fs (loop2): Directory bread(block 131) failed [ 521.385436] FAT-fs (loop2): Directory bread(block 132) failed [ 521.401133] FAT-fs (loop2): Directory bread(block 133) failed [ 521.417159] FAT-fs (loop2): Directory bread(block 134) failed [ 521.436212] FAT-fs (loop2): Directory bread(block 135) failed [ 521.474085] FAT-fs (loop2): Directory bread(block 136) failed [ 521.482531] FAT-fs (loop2): Directory bread(block 137) failed [ 521.568426] attempt to access beyond end of device [ 521.573493] loop2: rw=2049, want=311, limit=128 [ 646.644025] INFO: rcu_sched self-detected stall on CPU [ 646.650027] 0-....: (124999 ticks this GP) idle=bee/1/4611686018427387906 softirq=207744/207744 fqs=31221 [ 646.660197] (t=125000 jiffies g=114261 c=114260 q=1275) [ 646.665725] NMI backtrace for cpu 0 [ 646.669331] CPU: 0 PID: 9933 Comm: kworker/u4:6 Not tainted 4.18.0-rc2+ #117 [ 646.676490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.685841] Workqueue: events_unbound flush_to_ldisc [ 646.690923] Call Trace: [ 646.693484] [ 646.695620] dump_stack+0x1c9/0x2b4 [ 646.699240] ? dump_stack_print_info.cold.2+0x52/0x52 [ 646.704413] ? lock_release+0xa30/0xa30 [ 646.708376] nmi_cpu_backtrace.cold.4+0x19/0xce [ 646.713036] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 646.718217] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 646.723479] arch_trigger_cpumask_backtrace+0x14/0x20 [ 646.728652] rcu_dump_cpu_stacks+0x175/0x1c2 [ 646.733044] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 646.738050] check_cpu_stall.isra.60.cold.78+0x36c/0x5a6 [ 646.743487] ? print_other_cpu_stall+0x4b0/0x4b0 [ 646.748234] ? perf_trace_lock+0x920/0x920 [ 646.752455] ? __lock_acquire+0x7fc/0x5020 [ 646.756690] ? trace_hardirqs_on+0x10/0x10 [ 646.760936] ? trace_hardirqs_on+0x10/0x10 [ 646.765162] ? find_held_lock+0x36/0x1c0 [ 646.769212] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 646.774045] ? lock_downgrade+0x8f0/0x8f0 [ 646.778178] ? perf_trace_lock+0x920/0x920 [ 646.782393] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 646.787214] ? graph_lock+0x170/0x170 [ 646.790997] ? graph_lock+0x170/0x170 [ 646.794799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.800329] ? pvclock_gtod_notify+0x2e3/0x3e0 [ 646.804901] ? __lock_is_held+0xb5/0x140 [ 646.808951] rcu_check_callbacks+0x23f/0xcd0 [ 646.813339] ? __acct_update_integrals+0x127/0x510 [ 646.818251] ? rcu_cpu_stall_reset+0x220/0x220 [ 646.822816] ? __lock_is_held+0xb5/0x140 [ 646.826863] ? trace_hardirqs_off+0xd/0x10 [ 646.831079] ? raise_softirq+0x1ba/0x460 [ 646.835126] ? raise_softirq_irqoff+0x330/0x330 [ 646.839775] ? acct_account_cputime+0x63/0x80 [ 646.844250] ? account_system_index_time+0x32b/0x5c0 [ 646.849332] ? account_guest_time+0x460/0x460 [ 646.853813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 646.859332] ? hrtimer_run_queues+0x70/0x390 [ 646.863724] ? run_local_timers+0x172/0x1f0 [ 646.868037] ? timer_clear_idle+0x50/0x50 [ 646.872170] ? account_system_time+0x7f/0xb0 [ 646.876564] ? account_process_tick+0x76/0x240 [ 646.881129] update_process_times+0x2d/0x70 [ 646.885441] tick_sched_handle+0x9f/0x180 [ 646.889589] tick_sched_timer+0x45/0x130 [ 646.893639] __hrtimer_run_queues+0x3eb/0x10c0 [ 646.898205] ? tick_sched_do_timer+0x1a0/0x1a0 [ 646.902776] ? hrtimer_start_range_ns+0xd20/0xd20 [ 646.907605] ? pvclock_read_flags+0x160/0x160 [ 646.912082] ? kvm_clock_read+0x25/0x30 [ 646.916042] ? kvm_clock_read+0x25/0x30 [ 646.920001] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 646.925010] ? ktime_get_update_offsets_now+0x3db/0x5d0 [ 646.930366] ? do_timer+0x50/0x50 [ 646.933799] ? rcu_nmi_exit+0xe0/0x2d0 [ 646.937671] ? do_raw_spin_lock+0xc1/0x200 [ 646.941895] hrtimer_interrupt+0x2f3/0x750 [ 646.946118] smp_apic_timer_interrupt+0x165/0x730 [ 646.950944] ? smp_call_function_single_interrupt+0x660/0x660 [ 646.956812] ? _raw_spin_unlock+0x22/0x30 [ 646.960940] ? handle_edge_irq+0x330/0x870 [ 646.965170] ? task_prio+0x50/0x50 [ 646.968706] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 646.973533] apic_timer_interrupt+0xf/0x20 [ 646.977746] [ 646.979966] RIP: 0010:__sanitizer_cov_trace_pc+0x26/0x50 [ 646.985391] Code: 5d c3 66 90 55 65 48 8b 04 25 40 ee 01 00 65 8b 15 4f e1 85 7e 48 89 e5 81 e2 00 01 1f 00 48 8b 75 08 75 2b 8b 90 90 12 00 00 <83> fa 02 75 20 48 8b 88 98 12 00 00 8b 80 94 12 00 00 48 8b 11 48 [ 647.004605] RSP: 0018:ffff880161aaf238 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 647.012295] RAX: ffff8801c9b1c1c0 RBX: 000000026c309930 RCX: ffffffff83a45e6c [ 647.019553] RDX: 0000000000000000 RSI: ffffffff83a45d8d RDI: 0000000000000001 [ 647.026804] RBP: ffff880161aaf238 R08: ffff8801c9b1c1c0 R09: 0000000000000006 [ 647.034053] R10: ffff8801c9b1c1c0 R11: 0000000000000000 R12: ffffc900026fa000 [ 647.041303] R13: 0000000000001702 R14: 000000026c309931 R15: 00000000000000ff [ 647.048564] ? __process_echoes+0x2dc/0x8d0 [ 647.052865] ? __process_echoes+0x1fd/0x8d0 [ 647.057171] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 647.062690] __process_echoes+0x1fd/0x8d0 [ 647.066845] commit_echoes+0x163/0x1d0 [ 647.070723] n_tty_receive_buf_common+0x205b/0x2c60 [ 647.075725] ? save_stack+0x43/0xd0 [ 647.079333] ? __kasan_slab_free+0x11a/0x170 [ 647.083742] ? n_tty_receive_char_lnext+0x710/0x710 [ 647.088737] ? lock_release+0xa30/0xa30 [ 647.092694] ? trace_hardirqs_off+0xd/0x10 [ 647.096908] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 647.102001] ? debug_check_no_obj_freed+0x30b/0x595 [ 647.107025] n_tty_receive_buf2+0x33/0x40 [ 647.111168] tty_ldisc_receive_buf+0xb0/0x190 [ 647.115649] ? n_tty_receive_buf_common+0x2c60/0x2c60 [ 647.120818] tty_port_default_receive_buf+0x115/0x180 [ 647.125987] ? tty_port_lower_dtr_rts+0x90/0x90 [ 647.130637] ? trace_hardirqs_on+0xd/0x10 [ 647.134769] flush_to_ldisc+0x3fd/0x570 [ 647.138727] ? tty_buffer_free+0x160/0x160 [ 647.142946] ? __lock_is_held+0xb5/0x140 [ 647.146992] process_one_work+0xc73/0x1ba0 [ 647.151209] ? trace_hardirqs_on+0x10/0x10 [ 647.155428] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 647.160086] ? lock_repin_lock+0x430/0x430 [ 647.164308] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 647.169140] ? perf_trace_lock+0x920/0x920 [ 647.173353] ? lock_downgrade+0x8f0/0x8f0 [ 647.177484] ? graph_lock+0x170/0x170 [ 647.181272] ? graph_lock+0x170/0x170 [ 647.185082] ? lock_acquire+0x1e4/0x540 [ 647.189040] ? worker_thread+0x3dc/0x13c0 [ 647.193167] ? lock_downgrade+0x8f0/0x8f0 [ 647.197303] ? lock_release+0xa30/0xa30 [ 647.201256] ? kasan_check_read+0x11/0x20 [ 647.205384] ? do_raw_spin_unlock+0xa7/0x2f0 [ 647.209781] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 647.214352] ? kasan_check_write+0x14/0x20 [ 647.218565] ? do_raw_spin_lock+0xc1/0x200 [ 647.222781] worker_thread+0x189/0x13c0 [ 647.226742] ? process_one_work+0x1ba0/0x1ba0 [ 647.231220] ? graph_lock+0x170/0x170 [ 647.235015] ? find_held_lock+0x36/0x1c0 [ 647.239072] ? find_held_lock+0x36/0x1c0 [ 647.243124] ? __schedule+0x1ed0/0x1ed0 [ 647.247086] ? do_raw_spin_unlock+0xa7/0x2f0 [ 647.251487] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 647.256058] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 647.261574] ? __kthread_parkme+0x111/0x1d0 [ 647.265876] ? parse_args.cold.15+0x1b3/0x1b3 [ 647.270351] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 647.275350] ? trace_hardirqs_on+0xd/0x10 [ 647.279483] kthread+0x345/0x410 [ 647.282828] ? process_one_work+0x1ba0/0x1ba0 [ 647.287302] ? kthread_bind+0x40/0x40 [ 647.291084] ret_from_fork+0x3a/0x50