x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:45 executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0xa)
write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619fcd3823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f0004000000000000000000000000"], 0x90)

[  356.054624] binder: tried to use weak ref as strong ref
[  356.060139] binder: 32590:32592 Release 1 refcount change on invalid ref 0 ret -22
23:10:45 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoX\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:45 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xac14141b00000000, @loopback}, 0x1c)

23:10:45 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x222, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  356.103568] FAT-fs (loop3): bogus logical sector size 522
[  356.109224] FAT-fs (loop3): Can't find a valid FAT filesystem
[  356.136845] binder: BINDER_SET_CONTEXT_MGR already set
23:10:45 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66610b0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:45 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f0000000000)=0x80)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000280)="b3ce1eb4a45de3303ae404b611b390d4be36d085da4cad8c62e2a9516497fa195def0a6cb47a53471a6d9ba79e2f2113655e6bc6de9d3709ca3a176dea2934c67a5571aee260071fca5827753cbaf9b5d5ab6311a9b69de4dec41b7177a99d9adb88c9bebc306d0b63d38866d68d52dc5344968adb7e2882d7f84823219c50981d6b8e420455c2f4176d339371fec362759a81713d")
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0)

[  356.149847] binder: tried to use weak ref as strong ref
[  356.155351] binder: 32590:32612 Release 1 refcount change on invalid ref 0 ret -22
23:10:45 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xffffa888, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:45 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88470000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:45 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666104000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  356.199686] binder: 32590:32592 ioctl 40046207 0 returned -16
[  356.223624] FAT-fs (loop3): bogus logical sector size 522
[  356.229282] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:45 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:45 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xf401000000000000, @loopback}, 0x1c)

23:10:45 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x6e8, &(0x7f0000000280)})

23:10:45 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x2, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:45 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x4800)
r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xffffffffffffffd1, 0x8000)
ioctl$FICLONE(r0, 0x40049409, r1)
r2 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)

[  356.368779] FAT-fs (loop3): Directory bread(block 2569) failed
[  356.374920] FAT-fs (loop3): Directory bread(block 2570) failed
[  356.380957] FAT-fs (loop3): Directory bread(block 2571) failed
[  356.399374] FAT-fs (loop3): Directory bread(block 2572) failed
[  356.405441] FAT-fs (loop3): Directory bread(block 2573) failed
[  356.411465] FAT-fs (loop3): Directory bread(block 2574) failed
23:10:45 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6488, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  356.419689] FAT-fs (loop3): Directory bread(block 2575) failed
[  356.429770] FAT-fs (loop3): Directory bread(block 2576) failed
[  356.433058] binder: 32657:32660 IncRefs 0 refcount change on invalid ref 0 ret -22
[  356.439794] FAT-fs (loop3): Directory bread(block 2577) failed
[  356.443510] binder: 32657:32660 Release 1 refcount change on invalid ref 0 ret -22
[  356.457344] FAT-fs (loop3): Directory bread(block 2578) failed
23:10:45 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfec00000, @loopback}, 0x1c)

23:10:45 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdou\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  356.459082] binder: 32657:32662 IncRefs 0 refcount change on invalid ref 0 ret -22
[  356.471089] binder: 32657:32662 Release 1 refcount change on invalid ref 0 ret -22
23:10:45 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661130a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:45 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x6ea, &(0x7f0000000280)})

23:10:45 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x8035000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:45 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x100000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:45 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661210a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  356.600027] FAT-fs (loop3): bogus logical sector size 522
[  356.605657] FAT-fs (loop3): Can't find a valid FAT filesystem
[  356.639866] binder: 32685:32690 IncRefs 0 refcount change on invalid ref 0 ret -22
23:10:45 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x2000, @loopback}, 0x1c)

23:10:45 executing program 0:
mkdir(&(0x7f0000000240)='./file0//ile0\x00', 0x4000000000)
syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000280)="fc07fec34af1e56afa877bc191ad9ebb187edc68d3603ce05b3d1a1e8d3dd77143b92e3b60f60330ea20a1e9da5b394a320b58a889f73c1d6999178f162ef83cf63e277fedebfcd7b23df0774f41559aa7427fb16849812aeab5df5ea672118da1dadd2b139830b803fcd01592d617ccf6c40f1fde4618c9cd4a9fe83db3d8", 0x7f, 0x9}, {&(0x7f0000000300)="9737b489087d330487946a9886c9d6584575d57817aca7cffa67424a0166201a4d5e1937e0edc478d999839955d2d227eca108a8585c693207adf1e4dbbd9eec8d48c07708e19c5d8a80334ddedcb29363a4daf2a2a338c07434e452a6bf79e7db8ff5525322c7cb28251a06edd16f880e7c53b711025052d8678c2ff16b1dfaa990c40357773e405d9b8790d611816eebf4ab0d490ae42d5fbbdcedd1d8a45aba856de4dec1aa8b26c4b48add43ff8ef71a8b8cca144dada76731af8e5c42ee39110817f05ffb2c36c3ac0a15f2cbddd11c37bbb7f4012be01513d177c859fd16d6", 0xe2, 0x7fffffff}, {&(0x7f0000000400)="6e7cab4792a667e04a259fa46f44b3ea7c2a628aedbd154fe304e5b889127179532f16f98318e9b6020db17ebaedfe3c6915fb98728cf52a5399938924506c9442ca14c023508759c1edbf47c452cbb5edc72fdfae504f6f7900f07b7d0582a0cb5d721dc2f3ae815f2eaa9b529b20edf6cdce501995b442106b5bd19cc5ae2c89cb6fad8a906970f52396", 0x8b, 0xfffffffffffffff8}, {&(0x7f00000004c0)="24f79011832563754a355d9677081c5332c7aa5aa092644c9134229341fefa3667d816cf393da99e2b57dbb1719aa4aeff12568641ff2868d0f4653c26868985d26472ae235d2716c03df275f09652ccd80856d33375f13dbcc9cca86db5c0b308d83dbdc23b16be377885afc99c2d91ade09cba39f6322227b39581ce12ce28abe7a889aa97ca6ac6887eca7efd1d88830a13e5fa33b97c1b74cfb70bad70915696e66f15c06840fd29cefb4299e3ac95ac01bc0e1f150979f22f9662fa351da83fd3bc803f5cbebdd4d99a6998acb1d64fbef469193dc39fd9b830de5c4415ff2a00592b630b67acdda0d92f8b857d97a5a95f0a8abb281803a0972df0768b328fc8d8ee82a7d6115b46744fa0c25856f61f7db28ccdbbd1b367654469ecf811d0b437a2610a6c2e2d92ad13754bd9131a6c7a74132f4b42641750e555ed4a6d78f9311637517b8b98c08e62408c775742ec812b76143819108fcbdd7cc54438f502ff64f87948b4fa092943f44697c48a4729b26e495fc91ba6e46ba589ff6a513a5640a7db10e3d13fbb46829dab6baa759fa33624957f14362632afadabe4c6f94df7024ba9db16a1057bb7b785842173b78c4c7c2034ff54ae11566a5b74efaa1792f32daa10bee8d022d076e1653be63b9dca65fb622c198d84e6c20e3cc40cd3444c1d237c29ec2aaa318c5b0e8343e9102d71bce666cb9e1698a081150a329e8a5e244eb13c530d2b70bb8b4b55e04f31af6f671dd5ad122a3c68f23804476eec2b8cbe364fb9e9050fc75f15d4c463b9028fb40880c8b39a0a431a2a2caf20bc857f8b1cde29c57c6f215cf8f80862a20b5be749254eddb765c4b16fe75370a78eec5e6e77a606d3fad0f70be250a392c9450b7dd78d4b273e2bad70db5a80665b0d75b7a4cd177f0f548812c1d87b556810ac05480e6541d0086f10de5999fcca4ce4d2718a26bc847c85b33b9a2cc3e83f0773a8bf0ebb3c6bc05dc2df36f3a30bb399b9af1d4b3fe8173b10a9e30ec415545da540b7e3f0f921c90dc491d368352c84e1f6988aa16e46184faa0607fdc938974be0f8d71ac3e2f1f4f258aa796d6ee5b4620d37f945362e17c640bea0689d41e1d3b507618e64ca1f12608e8e6d2d3cf77017aad6ee3f41f6f8b18829ef2c98ef8097464a24c689162eefc6c56a3b92a85af83f1f87dabfd38cbaaa78ad978ebd7657b6f3fa53ecc0d0f6e54ae16c428f9a9d7e79be1aa88e6406fc754abe12d5dcea70c0f2e2c8bf1af2049c3573381084a1c073183ec8dc55cf9495a64fd9cef4b26d6d5ac2000bf3eeb2a7e49b45c5d771a5ce485fb2fd5f840f110366f4623c68a382c8b47ab63bfe253c30f4017dd1020302d3304ba4eb91a53d03d4cf3f9e1ac3d43e52697667e98bead5f9269c61873a819c64cb3fac68c7f7feb440bb072947384d530c119ca10852a7a54f39515cb08f9f480465ac7ea42799a26e3a637364a155b925d82f5834ec4a785c2ab2f5867e43f39fb15aaf2bf389d05a5684f4fd6de42a044eca3dfea54c6c5585192ac9d2a53349ccff3e1d378250a25d467191e0a19de4f1721718cec75fd4e2caa1c7717e45a9cc1001a655b2ff42f0a1c4dae76bf71feffd51318933810dccbfe1fa372008b68c22d4f594513ef401c41eab048e426b77fc12551321c32e039471218fc953ba096e96fa0d8e2dc193a28ed76a7fb746056e0613fc7072dd9b691062747ad497cb5acdc86a47aecb8fc8f9402eb0430ba52552ecb2b2ba789c561e2a185c501441f2bd529c97da423401a35742f1ad4224d8a83314dcd026cbe1c4adc3bd018ea63e5f8948591a4d0e470d981c50fc0ae39ba021afda325c1e58aeb24cb891cacfbc3e1c4940a71e9ce196e67f9f0d0063422d1860200eb151ee0f966cb3fd7aae54d23ac7dde4b7367ef1448db597283c24aab78ba66804046b7e6ad616cfb4ab3231b7816c0841a798d20355d54964bc2d9e8f1483eff6b2074b9bc926adee18a1857a21b6cc708d64062b1ffda91ee47ce9995fd0e4e64ef9033e32df4d16f831a68a02abaf80a45a4a651ce3b6148a0054e0dc7ad1bd5b30210896852745ab0b6b7b5dba8248b985d9d154564393b1be5f6afedd80bf5030896d586c78206175b9e893028c886d4fc48b84da5d5c0830a4643637dc9f19a5a7719fa2a3aba2a9e7ba367ad03363338547767838b8c9a5639cba3c5b971f104a0f6c4d9ba1f67540dd2483aa71fa381c82f09f210732b84729f242664480231b1883e46b4caccb0925161561c9b97a3647e3bfbf0f17505d24e16d2d1e08932e81e4d5bafcd5bbc9d1502d15a26777d01fc0903ca7e303661d01f9c832f49d1e50474874fbbe6b589219e4dd457ba705b87ff32afbb9559f2ac78d0c528ab72dd9d15247761e2399211caf72412dbf8ae3dfcfc43f890f4a7551627f924a4621bbe3618d82248ca6a992dbbdc25e200b08748da41743fc3df5afdfc74f089a8011f15c0ccfb685b3f3bc3cd182836edc8dfb9bd8ef1c73cacd0956318f1cdf705455d79467cb9e2ab2f364f86f42a87d11f056e9a919a8bce42aa9576b9c7396f9c24a0f0312976dcde46907eb60185179bfb05841c64962f38fdffc47c8196234df41b363f9ef0be3c0cc849b46237b5d093026902455fe1e01e73b2cab7e28f904e54e664d77daa57efcba3b65162c4bd2e1e09e9775dd78ac828933fb162a1cd8515a0b632220b05ea91865138b839def5448d83dec83b9b227962e348a3e716c7d6ed94f8b8f6708ac4442d07cfcbb8e687b839bc8da24c884b477adab2a61faae846f72bbc6cbe15aa4272a1d4a77912dc649afc31cbb2d82d16fc9aabbd42e217bbcb8c8775eab7c5055b30ec69f0e9b7af14c9f1f12c4a022207c87ad0f6c49b2d021c3fecd78b9d7d6ea66448d370beb1f681f7e062dc42154a063b11397179c94b585231a9eadf111f17645ea5005dec0c171026baa6528571be986aae637d0bab78031f5f51c676a968ca4e70f3d9dbb939e54411b9d6c9e41ed941b00addcc8390c0f3598d21a9f6030c69e713c9d180bb01394e1da94d94cb02599986d82d713d85302fc56f3846c17991abbfa588cc4ab4b12f3c5ee98892fa307815ba0f5a447129ace13f150a96ad222312c8c852aadaf71d435ca4dd6fffde1904864503e64992b51dd271cef7dcbebf136556872d9d9c8c5aa8c99c4486d92bf062885b5085635a00ac74d17cf633bc8591d351257f33fecb7ceda0ce1e797f255129814e5c13bc237e24fe0076b8cdf31893cdf6c384f30f84b221d0b2228eec48e0fab0ec911e1ea878074ab6b25a03b2fdf90f37ad3f965fcf9ac728737475cd594467465bea77ce8acc6f7778146be26ed2d814d3a4c27ab834907e1fabfa3a5685abd5147a6140dae46beff8572e956f671f6f039dff03eb713f62a88e9803fafaf797ef8fde9c5f4f29e2ae44af1af492075cbe2e1f99dbc9dcf4b795b6f5d527ccf8e0cdf786034bc048dac37a8ebc54aa36514810a409cced164d6078092d9fc04532e6e8f713064024bcfc271e6fcc51bdd45aedb112232199aa33c4c41b98a93893772de10a02448e65de708df667139c2095d3639fcd75540d0b836336dc0a1bffceb31fa9f56099c76006dd9ae61ef0a89bf76ae90fb0b68653b63a0fbf8a6381aaad51f753f6882b455b40d3ed3c8caf693b35a502b30809a471cf8e7a80851254f49baaf08721196d3c14e21346586295eca9c64347307e4caf98f48b02c4ec6f323fd95ea8e941805aac30d87d9c47e0cc868ad12f7d1969c0e7d0b7b95108ee7d002302d58e17a8dc7410020b2e4295e2641e0de7848101c1bab66ca516bc1fe4864344942b65ab6f92bf1f0d011aaa94b16a122501f8d5a147125d15ad9fee69baaa1cd9470d613a4989d8a109935080269bee1899be33d4548fad4181dda9ca25f7d39cb34559e95d90564d6a67dfd607799d0c84f68b887fd83ae84d3911d4e87e267a97772fc44bb5d1a70139432b67ed09f54ea2dbf64bd1713fa1a5c67e6929d0dc6f65a9b91cc13d4d16ffdc5366ee3bdacfa42ba7e39c24629fd6a005b00721f8f6b48f464510a3f9b473edd1e23c790f00a04ece65a6207f6a04960411a7c6b9f00e61554356fb4e87b7fbe3f451ba10db682dd93ba6f1c51eaa6699349dd597e1d72d2ccee0efef66809f4e3caaea2b59028d7625c877585708ca546d308d856fa8fcf4308d9e8178cb7e8aaccae3b2a3c75fe5c6185ae4118b7beb6f95d6021d59276b00ae21bc194b8ef2553bd98f81d5957535348160909971ecdf75b5c0b6ee5d5ed8f6870a0fbfed33a5efc4d844490c4fce855d5f3e285f55d94339e5d758711a34c48261498549b5deb56b4cb807ef28e1eb7626d9e8224a3e7e2d3ea24ad9ea6618333f040c8377808c4b7a86a33a6dd4a56a65e09e1dcd5d7932ba409e14a99e5abfc08325ba13a58d8c8605f247e28d112acff98336fd8bd7ad12d670a71c594bc52127f60bf0ed11587d4053b49b64f2d16ec032654ddb4848324c10c37ead28e37e6477e5ac4e4740dd919658ecab39716501cb852af92d221b34b64ea258491ecfbaece5741ab077cdf3ac5885e8bb80536de80dae640b73ccf424220c169e95e73c0257f26640c5531b872a0f4bc86772b507b88f15580167972aa21985374fafb3267bd60aed5d4a41c8a00805459badb62fa47376ea73e04dffb89f0edd826e69d8bd00cffb783beeacf9b82c81ea2ff127ff045ffb9ea24a294228b2ca9c8fba2a6848d61c86c6fce62f2e7a0369c51cbdc6a96f64290ebfd08c97fe3af2c4cdb0642536fa75c7a0cc169481d9330cf994faa281dbf823fd35b683985ec82c093cae9eea85dcebc5a266f2fdda7b66d6ee74752acdfdc7e2ea0cd15c923ff85eac85cc2c172317d677c8b71ad18b7355048da5b36040379220dc9e0d5f3335e8ff9d6767723c22cb8374a45888c888d440f0f71bd17a77cc55019bece40a181b59cbf2001e1c4f3521fd6db30863a49192ab8c803bd8a73a38a3e8f02bb7ce034445e529ff736a6a14a0d7e20c9fa6b88d7ae9168872cce33ebcd095a3c7146924ba513e5a9d17b7ade57eb759c1a3e9d5b42ca6a5fd859506180a565e3df36b802a4430397b1077df9e776d442b2d192c1737ce9bed4da55a34f814f10d698509e16c99344c7d47bc204b1d4b8a20fd2d064d7860d05d1021d65b69044a7c82435ad967ed18b03bec6e987f1e8592042b76ed0d17c47f369f8cdd1b31198f636a6604f16638746b1d47e176c70810867c69d3456ed163a5fb116701da921e990f2833333ff64629da0359bf281f2cb91fed194f148502a3729fcde01db9e07ed041de18745ebacb80f0668ece42ca4a70a7a73a5840686008a0aa869686c82c873ee9d3d1197a3d83255f226190c989887f3f125c1ab810a8c70910f0dc4a93adf185998e4666793bc4a59c25f734fc66d31e5ca227914bd9aa0c1d4d40fdb631d82a6d6bf9091cbf1553c2cdc0f2fb140f3f9c4191023b29e923beacf3ee43850222152bd62f0655624a3da09ec389297d68470d148a7d005b3f289fb9e3f9aa2dd638e0acbf0a19da02ed43344ba47147bac4f69f52e97e1521531b9e4fcc6c745d0993deb16555cdf6e074f6263d3a13c5792a74e854f7a5461c699bc5d0fa9190cdcb26823fcc8fa33044d79bb393b1aa0f3b63e38be05d9bb87754185957bec7af1c005aa50a659da86b8480cef3456cac063c31a4d8525cf8c", 0x1000, 0x6}, {&(0x7f00000014c0)="3be6d6026d038cfbb8c1209dbdcaa3cf25a1418ab9b1a2132ae559779b916ffe6a14e8ed63b854d1f81d979a09b84a51d67040612cb7ad7a189963e129ec858d33c68f15cb339376d0470e1d29051ce686646033341c0a8158f7a8bd4374109393f1fabfb26ebf1db204e43ac7bbe7e18aa87e8c96dc325f7ee04c507e8337abbc2e414cc28527f0288ea43a3c9bdd6c47c266631c5121430512b469fcbcec587e44007173277e572658e38a76be39432e8e6d1840baa4de2f7fdee7b202e96ad09b597bca48542b281a69a8", 0xcc, 0x80}], 0x4000, &(0x7f0000000200)='cg}oup2\x00')
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cg}oup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)="696f2e6266712e65696768935f", 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:45 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x43050000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  356.647660] binder: 32685:32690 Release 1 refcount change on invalid ref 0 ret -22
[  356.678280] binder: tried to use weak ref as strong ref
[  356.683736] binder: 32685:32693 Release 1 refcount change on invalid ref 0 ret -22
[  356.705438] FAT-fs (loop3): bogus logical sector size 522
[  356.711456] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:46 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x14000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661230a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:46 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfffffff5, @loopback}, 0x1c)

23:10:46 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x7a, &(0x7f0000000280)})

23:10:46 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdod\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661100a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  356.839086] FAT-fs (loop3): bogus logical sector size 522
[  356.844719] FAT-fs (loop3): Can't find a valid FAT filesystem
[  356.854860] binder: tried to use weak ref as strong ref
[  356.860309] binder: 32729:32739 Release 1 refcount change on invalid ref 0 ret -22
23:10:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x600, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:46 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfe80000000000000, @loopback}, 0x1c)

[  356.886468] binder: BINDER_SET_CONTEXT_MGR already set
[  356.892767] binder: tried to use weak ref as strong ref
[  356.893281] binder: 32729:32739 ioctl 40046207 0 returned -16
[  356.898225] binder: 32729:32750 Release 1 refcount change on invalid ref 0 ret -22
23:10:46 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x100000000000000, &(0x7f0000000280)})

23:10:46 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x80000, 0x0)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000300)={0x9, 0xeb2, 0x100000001, 0x2938ba42, 0x2, 0x6})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
socketpair(0x19, 0x4, 0x4, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000280)={0x401, 0x9})
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000200)=0x6)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661290a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:46 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoi\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xffffdd86, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xa, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  357.011996] FAT-fs (loop3): bogus logical sector size 522
[  357.017627] FAT-fs (loop3): Can't find a valid FAT filesystem
[  357.027747] binder: tried to use weak ref as strong ref
[  357.033305] binder: 304:309 Release 1 refcount change on invalid ref 0 ret -22
23:10:46 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:46 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x600000000000000, @loopback}, 0x1c)

23:10:46 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000006c0)='./file0//ile0\x00', 0x0, 0xfffffffffffffffc)
mknod$loop(&(0x7f00000003c0)='./file0//ile0\x00', 0xe018, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @broadcast, @broadcast}, &(0x7f0000000200)=0xc)
mount(&(0x7f0000000400)='./file0//ile0\x00', &(0x7f0000000440)='./file0//ile0\x00', &(0x7f0000000480)='pstore\x00', 0x0, &(0x7f00000004c0)="de48b9396b177a4ad86edaa2e4004bcffb46b524b8a943310ad60eaae6d12507e19053bebc655db16c93200167ad50de50bdbe8488dd5b4a82d3e5fbe24f08cb838c7f5c4e82821ff0a716147cccf9ef432d642bfc6b037af71814d591200e2a194d0066db9d4469c9edc9b9633e622d33a2c47bed5dba8486ddf4b0b80f63cbe690ba8b1cc88fbc64a0eb3ce0763a9f618ea15266dd75")
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000580)={0x9ee7, 0x0, 0x8200, 0x10000, 0x7, 0x0, 0x0, 0x495b, <r3=>0x0}, &(0x7f00000005c0)=0x20)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000600)={r3, 0x30, "d31ac685ba40a4e9a3398714398eff55179f65582cd042d717570792e32f6cbd27315e83aaa86b041478873ab0f65d29"}, &(0x7f0000000640)=0x38)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@xdp={0x2c, 0x4, r2, 0x1b}, {&(0x7f0000000240)=""/118, 0x76}, &(0x7f00000002c0), 0x29}, 0xa0)

[  357.075307] binder: BINDER_SET_CONTEXT_MGR already set
[  357.083782] binder: 304:309 ioctl 40046207 0 returned -16
[  357.085941] binder: tried to use weak ref as strong ref
[  357.095084] binder: 304:316 Release 1 refcount change on invalid ref 0 ret -22
23:10:46 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x7a00000000000000, &(0x7f0000000280)})

23:10:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x14, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66612f0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  357.185492] FAT-fs (loop3): bogus logical sector size 522
[  357.191247] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:46 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xe8030000, @loopback}, 0x1c)

23:10:46 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000200)={0x1}, 0x4)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000ffb000/0x3000)=nil})

[  357.285508] binder: tried to use weak ref as strong ref
[  357.291020] binder: 347:355 Release 1 refcount change on invalid ref 0 ret -22
[  357.310148] FAT-fs (loop3): bogus logical sector size 522
[  357.315761] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66612c0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xd, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:46 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdox\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x7, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:46 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x400000000000000, &(0x7f0000000280)})

[  357.339817] binder: BINDER_SET_CONTEXT_MGR already set
[  357.352205] binder: tried to use weak ref as strong ref
[  357.357673] binder: 347:368 Release 1 refcount change on invalid ref 0 ret -22
[  357.372393] binder: 347:355 ioctl 40046207 0 returned -16
23:10:46 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
lseek(r0, 0x406, 0x3)
getdents(r0, &(0x7f0000000040)=""/148, 0xab)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:46 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xf4010000, @loopback}, 0x1c)

[  357.459301] binder: tried to use weak ref as strong ref
[  357.464772] binder: 385:389 Release 1 refcount change on invalid ref 0 ret -22
23:10:46 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x800000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:46 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x500, &(0x7f0000000280)})

23:10:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66611e0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  357.500462] FAT-fs (loop3): bogus logical sector size 522
[  357.506092] FAT-fs (loop3): Can't find a valid FAT filesystem
[  357.513048] binder: BINDER_SET_CONTEXT_MGR already set
[  357.518445] binder: tried to use weak ref as strong ref
[  357.523880] binder: 385:399 Release 1 refcount change on invalid ref 0 ret -22
[  357.527976] binder: 385:389 ioctl 40046207 0 returned -16
23:10:46 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo*\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661200a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:46 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x9, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="6f3f60094a109ceb8048b927f23835c8ba867bb3658dea52e4ab2b64e2e01cead1c70ca6eb795ce2343ceb8d48b0ee95aca1b11b0bc8c8d8b42fe46400637a74643ce5a845ee863636715958f530c02d89977393224770345c2b86b5a60558", 0x5f, 0x100000000}], 0x2000000, &(0x7f0000000340)={[{@rtdev={'rtdev', 0x3d, './file0'}}, {@barrier='barrier'}, {@uqnoenforce='uqnoenforce'}, {@nolargeio='nolargeio'}, {@prjquota='prjquota'}, {@noikeep='noikeep'}, {@logbsize={'logbsize', 0x3d, [0x36, 0x75, 0x67]}}]})
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4888, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x806000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:46 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x3, @loopback}, 0x1c)

[  357.645509] binder: tried to use weak ref as strong ref
[  357.650977] binder: 413:422 Release 1 refcount change on invalid ref 0 ret -22
[  357.665975] FAT-fs (loop3): bogus logical sector size 522
[  357.671607] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:46 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo+\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  357.728239] binder: BINDER_SET_CONTEXT_MGR already set
[  357.739674] binder: tried to use weak ref as strong ref
[  357.745126] binder: 413:437 Release 1 refcount change on invalid ref 0 ret -22
[  357.752936] binder: 413:422 ioctl 40046207 0 returned -16
23:10:47 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x3, &(0x7f0000000280)})

23:10:47 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661260a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xe02000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:47 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)

[  357.801559] FAT-fs (loop3): bogus logical sector size 522
[  357.807170] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xfdffffff, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  357.867327] XFS (loop0): unknown mount option [barrier].
23:10:47 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x1b1414ac, @loopback}, 0x1c)

[  357.915296] binder: 458:467 IncRefs 0 refcount change on invalid ref 0 ret -22
[  357.922784] binder: 458:467 Release 1 refcount change on invalid ref 0 ret -22
23:10:47 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666107000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:47 executing program 0:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:47 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoo\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  357.957273] FAT-fs (loop3): bogus logical sector size 522
[  357.962897] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x6488, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:47 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xa, @loopback}, 0x1c)

23:10:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x200000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  358.030702] binder: tried to use weak ref as strong ref
[  358.036144] binder: 458:473 Release 1 refcount change on invalid ref 0 ret -22
23:10:47 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)

23:10:47 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x4c000000, &(0x7f0000000280)})

23:10:47 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661220a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:47 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo%\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x43050000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8035000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:47 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xff00000000000000, @loopback}, 0x1c)

23:10:47 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)

23:10:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x800e0000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:47 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66611a0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  358.232151] binder: tried to use weak ref as strong ref
[  358.237640] binder: 525:536 Release 1 refcount change on invalid ref 0 ret -22
[  358.262734] FAT-fs (loop3): bogus logical sector size 522
[  358.268419] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffca88, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:47 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
openat$cgroup_int(r0, &(0x7f0000000300)="6370757365742e73636865e044a833a11fcb1b4ab1b2646f61645f62616c616e6365000000c33f87c87983ce836cbc1c", 0x2, 0x0)
write$cgroup_int(r0, &(0x7f00000000c0), 0x12)

23:10:47 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x1000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:47 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x7000000, @loopback}, 0x1c)

23:10:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:47 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x6000000, &(0x7f0000000280)})

[  358.362573] binder: BINDER_SET_CONTEXT_MGR already set
[  358.376015] binder: tried to use weak ref as strong ref
[  358.376156] FAT-fs (loop3): bogus logical sector size 522
[  358.381514] binder: 525:564 Release 1 refcount change on invalid ref 0 ret -22
[  358.394484] FAT-fs (loop3): Can't find a valid FAT filesystem
[  358.396734] binder: 525:536 ioctl 40046207 0 returned -16
23:10:47 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666106000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  358.494435] binder: tried to use weak ref as strong ref
[  358.499908] binder: 580:586 Release 1 refcount change on invalid ref 0 ret -22
[  358.529688] FAT-fs (loop3): Directory bread(block 2569) failed
[  358.535745] FAT-fs (loop3): Directory bread(block 2570) failed
23:10:47 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x500, @loopback}, 0x1c)

23:10:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x14, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xd00, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  358.541782] FAT-fs (loop3): Directory bread(block 2571) failed
[  358.550059] FAT-fs (loop3): Directory bread(block 2572) failed
[  358.554813] binder: BINDER_SET_CONTEXT_MGR already set
[  358.560144] FAT-fs (loop3): Directory bread(block 2573) failed
[  358.561742] binder: 580:586 ioctl 40046207 0 returned -16
[  358.570315] FAT-fs (loop3): Directory bread(block 2574) failed
[  358.574165] binder: tried to use weak ref as strong ref
[  358.578967] FAT-fs (loop3): Directory bread(block 2575) failed
23:10:47 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x101000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x800, 0x400}, {0x100000001, 0x1}, 0x8, 0x5, 0xa1})
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)
write$cgroup_int(r0, &(0x7f0000000280)=0x2b88, 0x12)

23:10:47 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x4c, &(0x7f0000000280)})

23:10:47 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)

[  358.584340] binder: 580:594 Release 1 refcount change on invalid ref 0 ret -22
23:10:47 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfc00, @loopback}, 0x1c)

23:10:47 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666105000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  358.618289] FAT-fs (loop3): Directory bread(block 2576) failed
[  358.624368] FAT-fs (loop3): Directory bread(block 2577) failed
[  358.630394] FAT-fs (loop3): Directory bread(block 2578) failed
23:10:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x8864, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x608, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:48 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo#\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:48 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xe00000000000000, @loopback}, 0x1c)

[  358.741643] binder: tried to use weak ref as strong ref
[  358.747093] binder: 606:621 Release 1 refcount change on invalid ref 0 ret -22
[  358.770095] binder: BINDER_SET_CONTEXT_MGR already set
[  358.775947] binder: tried to use weak ref as strong ref
[  358.781555] binder: 606:630 Release 1 refcount change on invalid ref 0 ret -22
23:10:48 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x40)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x8100, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  358.791575] binder: 606:621 ioctl 40046207 0 returned -16
23:10:48 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66612b0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:48 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x4c00000000000000, &(0x7f0000000280)})

23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1400000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:48 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfe80, @loopback}, 0x1c)

[  358.891886] binder: tried to use weak ref as strong ref
[  358.897524] binder: 647:650 Release 1 refcount change on invalid ref 0 ret -22
[  358.931421] binder: BINDER_SET_CONTEXT_MGR already set
23:10:48 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x5, 0xc00)
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000200)='9p\x00', 0x20, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@fscache='fscache'}]}})
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)

23:10:48 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x8847, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:48 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661090a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:48 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoc\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  358.937434] binder: tried to use weak ref as strong ref
[  358.943122] binder: 647:662 Release 1 refcount change on invalid ref 0 ret -22
[  358.946672] binder: 647:650 ioctl 40046207 0 returned -16
[  358.961038] FAT-fs (loop3): bogus logical sector size 522
[  358.966653] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88a8ffff, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:48 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x300000000000000, &(0x7f0000000280)})

23:10:48 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x101000)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000ac0))
accept$unix(r0, &(0x7f0000000b40), &(0x7f0000000bc0)=0x6e)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
lstat(&(0x7f0000000740)='./file0//ile0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x5, &(0x7f0000000580)=[{&(0x7f0000000240)="779fc9f9d26829436fc714073ddb34d8791bfa46a19f0bed7d6fe7f53814daec41b14620687560107140f1778151cef750d733692aeef4bb395cf5e77e511beac44d28a4038a3c342534e7967cd7a1ca927604de1b92cd1f024acdf40b53da871a9ce9182094cbdf28452cc8c97790152e60147b6ef357b4c2ac4accd051575e99", 0x81, 0x6}, {&(0x7f0000000300)="0b7ba94df6719b04db76324384550da7b0a04902e8eacd663e987467f6e5a96270d2e0178a09f4fde8e7c8ceb934ccda83849bd45d52d07844684c8418b4c00a7768e93ed42fd3a8acf9dee96bd15f4d306083b519bedf3e01b2943cf3cf85683a1850cecba88497c9f447dcdc4c2b44ab18d1fddb658c737ec46f8dd072bc3b9dd92af243742ed76208aed63a532a5e5a049d51ab7bd0fe7b49ae7726cc574510456892c20a32acb54d7dc982", 0xad, 0xfffffffffffffffc}, {&(0x7f00000003c0)="65bbf34bd3a2ac5c54db04ea431ede3e4ed3eb8f2cb46908f168efce3205555a6bc3c26d8d581af0728c8565939bf46e6947bde595701100d58f9553163c03aa8fef3a53a725c330a57be50b155810b58de598cf5aa09aeb79c95e29d7073a04b2bd675e44683eacc752d97963cd330042a0683a5974a537b7c040661ddc5839fed409d542901a6aee8450178c351e76ccb94ff9bfb6e9ec554c30107863ff126777ce3f20f0378ee5a2e7", 0xab, 0x9}, {&(0x7f0000000480)="5849f670752ca1abbac4780780d426dc732a6523a4dfcc637f142e1a5ca946", 0x1f, 0x9}, {&(0x7f00000004c0)="834443d6c87cc46c6ef9bca2108bcbca2bc60e944b55195597e17c84ef983fd4915298ac2653ab0e4904706f5aca125eeedf667e973351869bf51ccd71efe1ac433ab48f1463a1d1256dc4e0476d07cb7d62db5991333ef91a5c9846f89ae7a9536091119873e20283eaa77e21aa2646b631694befa6c4562d7a2be0bd31a37e592c5b9370a145724ef733df008294a8c93eef0405924e0b", 0x98, 0x401}], 0x80000, &(0x7f00000006c0)={[{@overriderock='overriderockperm'}, {@unhide='unhide'}, {@hide='hide'}, {@hide='hide'}, {@map_off='map=off'}, {@uid={'uid', 0x3d, r2}}, {@nocompress='nocompress'}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@hide='hide'}, {@norock='norock'}]})
r3 = openat$cgroup_int(r1, &(0x7f0000000b00)='io.bfq.weight\x00', 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000a80)={0x5, &(0x7f0000000780)=[{}, {}, {}, {}, {}]})
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)

23:10:48 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfec0, @loopback}, 0x1c)

23:10:48 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661120a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:48 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x88a8ffff00000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  359.095974] FAT-fs (loop3): bogus logical sector size 522
[  359.101645] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x60000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  359.169783] binder: tried to use weak ref as strong ref
[  359.175227] binder: 695:699 Release 1 refcount change on invalid ref 0 ret -22
23:10:48 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x4000, @loopback}, 0x1c)

23:10:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x8864000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  359.226731] binder: BINDER_SET_CONTEXT_MGR already set
[  359.238526] binder: tried to use weak ref as strong ref
[  359.243947] binder: 695:710 Release 1 refcount change on invalid ref 0 ret -22
[  359.265799] binder: 695:699 ioctl 40046207 0 returned -16
23:10:48 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:48 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:48 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x84000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_netfilter(r0, &(0x7f0000001680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f00000003c0)={0x1274, 0x0, 0xf, 0xb18, 0x70bd26, 0x25dfdbff, {0x5, 0x0, 0x8}, [@typed={0xe0, 0x38, @binary="ad075f7eb3bf24b09ccb1f6f2d36fdb1baa7dfd33898a466599544f7eb8a0cabdfa94dbfb294711c046ec87b106165f6344eed9fa15b910d98103cca0d44c7d34a11bfedf15de9ee0dcfdfed6c4d2d9a46f998ced144c72663b3ea61c012f5fffb0fbc6cac65150e34fd932717fc341b95e3c8bb3b11a42196333aa5b2a36757611d5147e7cdd22cfdc1e87d6f4a135a72e829145aa3e4bf12baf7cf6bacbd3799397fb0a76b2adc2a08e95233667776bc3ee6961ce14022b887d75a2ac99e269e4b40c0dda0f56937aeaa6a618837947deb75ed8e1eabc5810bf1"}, @generic="a17bb04c015bd141cebdc74ac702854874e9b926533b03b7024f04b54fa53d35e68376b666a7b1ada2fb1d61a70e0d3d178a8f3c1cc31f84e591757d138c76f8b3608c1438121132b201ffa08ddedf95dd6c3cf142c0a2b5185bc4839072a25718975f7f3e9363f7890c3879ce6e6d8c9ef32ede81", @nested={0x100, 0x47, [@typed={0x8, 0x74, @u32=0x10000}, @generic="7e12c7552eb5e95a003d1aca78847c0d5bf373e16fe8499e1ac5240c9959a95449fd3043f95621204dbc741bd295101d17449317e165a17c54da431536a186bee0791b8c821793b65d870717c771e118439afd115b1be204799f5389f7eaa6173d3627cea5d87393d1fc02bb5f3e95cfa5d28d81ccb5d23ccaedee", @typed={0x8, 0x33, @fd=r1}, @typed={0x8, 0xe, @ipv4=@rand_addr=0x9}, @generic="9770b1af0779aaf3d4311955c6a297c15e782c370007ce00eb494e736736bd022c9a6b1692cc244aee7d78d968e502c275b6579a2548eb7aed4a5e509eae686a46675165d3e0649b69f91d4257a55f42be674cfb8e5c341f571449ad405cfd977fc6d013", @typed={0x4, 0x2b}]}, @generic="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", @typed={0x8, 0x93, @uid=r2}]}, 0x1274}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f00000016c0)='./file0//ile0\x00', 0x0, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0), 0x12)

23:10:48 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x4cc9010000000000, &(0x7f0000000280)})

23:10:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xfffff000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:48 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661080a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:48 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:48 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x80fe, @loopback}, 0x1c)

23:10:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x7000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffffff00000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  359.421201] binder: tried to use weak ref as strong ref
[  359.426659] binder: 749:751 Release 1 refcount change on invalid ref 0 ret -22
[  359.457237] FAT-fs (loop3): bogus logical sector size 522
[  359.462869] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:48 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661110a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:48 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x174, 0x36, 0x0, 0x70bd2c, 0x25dfdbfc, {0x1d}, [@generic="088dbf2a4b3971752081d7ae768dbc2e96db66417da75789226474ac3aaf586ba4f4458b5be30803a4f3af18eebc404ce367b7b4f15783676963a611bb94fb5288bd7a9821e28f3162ed6e2c99af952932e92312a1b2bff113696333ff04d1efd0c0b04d9a8ffc10566a435b41152c05ed62dc090b2cfca27f6e3fbd1fd7626c9b94f5fa28181a06c0df3c7878ea1dd53b6f802df60f408b99f6e1464833824e5c5d", @generic="37365068c5345a0a6576d4661750d64108a9f6fa8d9daa79897f881168b3d8c911eb52bb06a9e33ef77d600cf972750462faab355b3a2cd6cbdcef7aaec1f5498602be2b5c6fa703b6132c53acc498cd1ed96950951a42f1ea9c205a7489e316981744daeb2568f455cd20e76eb251ebbe1b65a15be2e6edd271f12fa0eccdb570b9e976d5816135b91782137dd383a28c09ac4c61bdbf9ffe8dd32aecc07ca8c32e2f7d784cfcc41770eb3fcebb64d29e82e78d267a664fa35f0fc044"]}, 0x174}, 0x1, 0x0, 0x0, 0x91}, 0x4000084)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)

[  359.492605] binder: BINDER_SET_CONTEXT_MGR already set
23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x8000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  359.513358] binder: 749:751 ioctl 40046207 0 returned -16
23:10:48 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0xa000000, &(0x7f0000000280)})

23:10:48 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xff, 0x2000)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000240)={0x3, 0xffffffffffffff9c})
clock_settime(0x7, &(0x7f0000000000))
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:48 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66611b0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  359.593580] FAT-fs (loop3): bogus logical sector size 522
[  359.599206] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:48 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdop\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xe020000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xf0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:48 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xa000000, @loopback}, 0x1c)

23:10:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x22020000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  359.706931] binder: 805:809 IncRefs 0 refcount change on invalid ref 0 ret -22
[  359.714404] binder: 805:809 Release 1 refcount change on invalid ref 0 ret -22
[  359.744849] binder: tried to use weak ref as strong ref
[  359.750400] binder: 805:811 Release 1 refcount change on invalid ref 0 ret -22
[  359.784387] FAT-fs (loop3): bogus logical sector size 522
[  359.790018] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:49 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x68000000, &(0x7f0000000280)})

23:10:49 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfc000000, @loopback}, 0x1c)

23:10:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x4888, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:49 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:49 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:49 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/autofs\x00', 0x400, 0x0)
futimesat(r0, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={{}, {0x77359400}})
r1 = syz_open_dev$audion(&(0x7f0000001600)='/dev/audio#\x00', 0x10000, 0x101000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001700), &(0x7f0000001780)=0x4)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000013c0)={0x3, 0x8, 0x81, 0x2, <r3=>0x0}, &(0x7f0000001400)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001440)={r3, 0x2, 0x0, 0x1, 0x101}, &(0x7f0000001480)=0x18)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000014c0)={{0xa, 0x4e22, 0x2, @mcast2}, {0xa, 0x4e21, 0x8, @remote}, 0x3, [0x3f, 0x40, 0x7, 0x0, 0x4ca9, 0x1, 0x3, 0xfffffffffffffffe]}, 0x5c)
accept4$inet6(r2, &(0x7f0000001640)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001680)=0x1c, 0x80800)
setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000001300)={0x7, {{0x2, 0x4e21, @loopback}}}, 0x88)
r4 = openat$cgroup_int(r2, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffffc00, 0x1, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000, 0x85fe}], 0x2, &(0x7f00000012c0)=ANY=[@ANYBLOB='\x00\x00\x00\n\x00\x00\x00'])
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001540)={r3, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000001740)=0x84)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000016c0)={{0xeb, 0x12a14454}, 0x40}, 0x10)
write$cgroup_int(r4, &(0x7f00000000c0), 0x12)

23:10:49 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66610d0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:49 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73fb", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:49 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xe000000, @loopback}, 0x1c)

23:10:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xb000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:49 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8864000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  360.320685] binder: tried to use weak ref as strong ref
[  360.326166] binder: 850:855 Release 1 refcount change on invalid ref 0 ret -22
23:10:49 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661180a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  360.371390] FAT-fs (loop3): bogus logical sector size 522
[  360.377022] FAT-fs (loop3): Can't find a valid FAT filesystem
[  360.384144] binder: BINDER_SET_CONTEXT_MGR already set
23:10:49 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f738f", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xd000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  360.415968] binder: 850:855 ioctl 40046207 0 returned -16
[  360.428949] binder: 850:877 IncRefs 0 refcount change on invalid ref 0 ret -22
[  360.436430] binder: 850:877 Release 1 refcount change on invalid ref 0 ret -22
[  360.444822] XFS (loop0): Invalid superblock magic number
23:10:49 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661240a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:49 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)

[  360.495372] FAT-fs (loop3): bogus logical sector size 522
[  360.501098] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:49 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x60000000, &(0x7f0000000280)})

23:10:49 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x806000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:49 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xf401, @loopback}, 0x1c)

23:10:49 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:49 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x806, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:49 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661190a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:49 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xff00, @loopback}, 0x1c)

[  360.642446] FAT-fs (loop3): bogus logical sector size 522
[  360.647964] binder: tried to use weak ref as strong ref
[  360.648448] FAT-fs (loop3): Can't find a valid FAT filesystem
[  360.653430] binder: 920:926 Release 1 refcount change on invalid ref 0 ret -22
23:10:49 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000200))
creat(&(0x7f0000000000)='./file0\x00', 0x20)

23:10:49 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88caffff, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xfdffffff00000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  360.770176] FAT-fs (loop3): bogus logical sector size 522
[  360.775906] FAT-fs (loop3): Can't find a valid FAT filesystem
[  360.779338] binder: tried to use weak ref as strong ref
[  360.782719] binder: BINDER_SET_CONTEXT_MGR already set
[  360.787227] binder: 920:954 Release 1 refcount change on invalid ref 0 ret -22
[  360.807151] FAT-fs (loop5): bogus number of reserved sectors
[  360.813044] FAT-fs (loop5): Can't find a valid FAT filesystem
23:10:50 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66612a0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:50 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  360.817320] binder: 920:926 ioctl 40046207 0 returned -16
23:10:50 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000200)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)="68661f9d6c756300", 0x200000, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x1, 0x1)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xb80b, @loopback}, 0x1c)

23:10:50 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x5, &(0x7f0000000280)})

23:10:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x600000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:50 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:50 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666102000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  360.946111] FAT-fs (loop3): bogus logical sector size 522
[  360.951754] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x88caffff, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xe, @loopback}, 0x1c)

23:10:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x600, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  361.006094] binder: tried to use weak ref as strong ref
[  361.011567] binder: 981:993 Release 1 refcount change on invalid ref 0 ret -22
[  361.028037] FAT-fs (loop5): bogus number of reserved sectors
[  361.033921] FAT-fs (loop5): Can't find a valid FAT filesystem
23:10:50 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  361.069530] binder: BINDER_SET_CONTEXT_MGR already set
[  361.075556] binder: 981:993 ioctl 40046207 0 returned -16
[  361.084064] binder: tried to use weak ref as strong ref
[  361.089520] binder: 981:1007 Release 1 refcount change on invalid ref 0 ret -22
23:10:50 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x7400000000000000, &(0x7f0000000280)})

23:10:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x5, @loopback}, 0x1c)

23:10:50 executing program 0:
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, <r0=>0xffffffffffffff9c, 0x1})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'sit0\x00'}, 0x18)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)

[  361.114303] FAT-fs (loop3): Directory bread(block 2569) failed
[  361.125243] FAT-fs (loop3): Directory bread(block 2570) failed
[  361.158487] FAT-fs (loop3): Directory bread(block 2571) failed
23:10:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:50 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x20000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  361.185322] FAT-fs (loop3): Directory bread(block 2572) failed
23:10:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  361.225654] binder: 1025:1026 IncRefs 0 refcount change on invalid ref 0 ret -22
[  361.232101] FAT-fs (loop3): Directory bread(block 2573) failed
[  361.233319] binder: 1025:1026 Release 1 refcount change on invalid ref 0 ret -22
[  361.260446] FAT-fs (loop3): Directory bread(block 2574) failed
23:10:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xae7e31bb00000000, @loopback}, 0x1c)

23:10:50 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos#', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  361.282171] FAT-fs (loop5): bogus number of reserved sectors
[  361.288058] FAT-fs (loop5): Can't find a valid FAT filesystem
[  361.297184] FAT-fs (loop3): Directory bread(block 2575) failed
[  361.322385] FAT-fs (loop3): Directory bread(block 2576) failed
23:10:50 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x200, 0x0)
ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000200))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={'bridge_slave_0\x00', {0x2, 0x4e23, @rand_addr=0x1200000}})
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x700, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  361.338340] FAT-fs (loop3): Directory bread(block 2577) failed
[  361.356981] binder: tried to use weak ref as strong ref
[  361.362637] binder: 1025:1030 Release 1 refcount change on invalid ref 0 ret -22
[  361.365263] FAT-fs (loop3): Directory bread(block 2578) failed
23:10:50 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661270a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:50 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e0000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:50 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0xe906000000000000, &(0x7f0000000280)})

23:10:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfec0000000000000, @loopback}, 0x1c)

23:10:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x1c00, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  361.495977] Unknown ioctl -2147191725
[  361.509452] binder: tried to use weak ref as strong ref
[  361.514971] binder: 1080:1084 Release 1 refcount change on invalid ref 0 ret -22
[  361.526369] FAT-fs (loop3): bogus logical sector size 522
[  361.531976] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x300000000000000, @loopback}, 0x1c)

23:10:50 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661280a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:50 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73f5", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8864, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  361.556790] Unknown ioctl 35096
[  361.565738] Unknown ioctl 21531
[  361.577817] binder: BINDER_SET_CONTEXT_MGR already set
[  361.583576] Unknown ioctl -2147191725
[  361.584116] Unknown ioctl 35096
23:10:50 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x10c90100, &(0x7f0000000280)})

23:10:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x700000000000000, @loopback}, 0x1c)

[  361.608113] binder: 1080:1084 ioctl 40046207 0 returned -16
[  361.615170] Unknown ioctl 21531
23:10:50 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:50 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x101040)
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000200))
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xb, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:50 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66610a0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  361.663071] FAT-fs (loop3): bogus logical sector size 522
[  361.668679] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb00, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:51 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x700, &(0x7f0000000280)})

[  361.715182] binder: tried to use weak ref as strong ref
[  361.720640] binder: 1109:1111 Release 1 refcount change on invalid ref 0 ret -22
[  361.728949] binder: BINDER_SET_CONTEXT_MGR already set
[  361.735014] binder: tried to use weak ref as strong ref
[  361.740470] binder: 1109:1122 Release 1 refcount change on invalid ref 0 ret -22
[  361.748952] binder: 1109:1111 ioctl 40046207 0 returned -16
23:10:51 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xa00000000000000, @loopback}, 0x1c)

23:10:51 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x7, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:51 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8848, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:51 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  361.847223] binder: tried to use weak ref as strong ref
[  361.852662] binder: 1138:1146 Release 1 refcount change on invalid ref 0 ret -22
[  361.865406] FAT-fs (loop3): bogus logical sector size 522
[  361.871064] FAT-fs (loop3): Can't find a valid FAT filesystem
[  361.883161] binder: BINDER_SET_CONTEXT_MGR already set
23:10:51 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66611c0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:51 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x4c00, &(0x7f0000000280)})

23:10:51 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.low\x00', 0x2, 0x0)
write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x3, {0x5}}, 0x18)
socket$vsock_stream(0x28, 0x1, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

[  361.901572] binder: 1138:1146 ioctl 40046207 0 returned -16
23:10:51 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x800000000000000, @loopback}, 0x1c)

23:10:51 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd00, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x2000000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  362.002553] FAT-fs (loop5): bogus number of reserved sectors
[  362.008433] FAT-fs (loop5): Can't find a valid FAT filesystem
23:10:51 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:51 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:51 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x20000000, @loopback}, 0x1c)

23:10:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xb00000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:51 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x32)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

[  362.074094] binder: tried to use weak ref as strong ref
[  362.079587] binder: 1185:1190 Release 1 refcount change on invalid ref 0 ret -22
[  362.089184] binder: BINDER_SET_CONTEXT_MGR already set
[  362.099568] binder: tried to use weak ref as strong ref
[  362.105063] binder: 1185:1193 Release 1 refcount change on invalid ref 0 ret -22
[  362.108330] binder: 1185:1190 ioctl 40046207 0 returned -16
23:10:51 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0xfffffdfd, &(0x7f0000000280)})

[  362.119241] FAT-fs (loop3): bogus logical sector size 522
[  362.124825] FAT-fs (loop3): Can't find a valid FAT filesystem
[  362.219650] binder: tried to use weak ref as strong ref
[  362.225115] binder: 1208:1211 Release 1 refcount change on invalid ref 0 ret -22
[  362.242390] binder: BINDER_SET_CONTEXT_MGR already set
[  362.248219] binder: tried to use weak ref as strong ref
[  362.248976] binder: 1208:1211 ioctl 40046207 0 returned -16
[  362.253688] binder: 1208:1219 Release 1 refcount change on invalid ref 0 ret -22
[  362.263537] FAT-fs (loop5): bogus number of reserved sectors
[  362.272810] FAT-fs (loop5): Can't find a valid FAT filesystem
23:10:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x88480000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:51 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xfe800000, @loopback}, 0x1c)

23:10:51 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66610e0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:51 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000240)=<r2=>0x0)
fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lstat(&(0x7f0000000300)='./file0//ile0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$P9_RSTATu(r0, &(0x7f00000003c0)={0x89, 0x7d, 0x1, {{0x0, 0x74, 0x80, 0x2, {0x60, 0x3, 0x7}, 0x88000000, 0x100000001, 0x6, 0xffff, 0x9, '%(md5sum^', 0x22, '^keyring]em0system.vboxnet0$,$self', 0xe, 'io.bfq.weight\x00', 0x8, 'cgroup2\x00'}, 0x0, "", r2, r3, r4}}, 0x89)

23:10:51 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x300000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:51 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:51 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:51 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x20000000, &(0x7f0000000280)})

[  362.692994] FAT-fs (loop5): bogus number of reserved sectors
[  362.697270] binder: tried to use weak ref as strong ref
[  362.698880] FAT-fs (loop5): Can't find a valid FAT filesystem
[  362.704235] binder: 1233:1239 Release 1 refcount change on invalid ref 0 ret -22
[  362.720323] binder: BINDER_SET_CONTEXT_MGR already set
[  362.731172] FAT-fs (loop3): bogus logical sector size 522
[  362.733454] binder: tried to use weak ref as strong ref
23:10:51 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xff000000, @loopback}, 0x1c)

23:10:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x89060000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:51 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
chdir(&(0x7f0000000200)='./file0//ile0\x00')
openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:52 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666125000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:52 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb00000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  362.736778] FAT-fs (loop3): Can't find a valid FAT filesystem
[  362.748122] binder: 1233:1243 Release 1 refcount change on invalid ref 0 ret -22
[  362.766816] binder: 1233:1239 ioctl 40046207 0 returned -16
23:10:52 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0xffffff7f, &(0x7f0000000280)})

23:10:52 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:52 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:52 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xa00000000000000, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x88640000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  362.900617] FAT-fs (loop3): Directory bread(block 2569) failed
[  362.903997] binder: tried to use weak ref as strong ref
[  362.906672] FAT-fs (loop3): Directory bread(block 2570) failed
[  362.912043] binder: 1278:1280 Release 1 refcount change on invalid ref 0 ret -22
[  362.919133] binder: BINDER_SET_CONTEXT_MGR already set
[  362.930036] FAT-fs (loop3): Directory bread(block 2571) failed
[  362.937732] binder: tried to use weak ref as strong ref
[  362.943164] binder: 1278:1281 Release 1 refcount change on invalid ref 0 ret -22
23:10:52 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x2000000, @loopback}, 0x1c)

[  362.950746] FAT-fs (loop3): Directory bread(block 2572) failed
[  362.956781] FAT-fs (loop3): Directory bread(block 2573) failed
[  362.963481] FAT-fs (loop3): Directory bread(block 2574) failed
[  362.969588] FAT-fs (loop3): Directory bread(block 2575) failed
[  362.979682] FAT-fs (loop3): Directory bread(block 2576) failed
[  362.989652] FAT-fs (loop3): Directory bread(block 2577) failed
23:10:52 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000200))
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)
fcntl$setsig(r2, 0xa, 0x3b)

23:10:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xffffca88, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:52 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666103000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:52 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x4000000, &(0x7f0000000280)})

[  362.999838] FAT-fs (loop3): Directory bread(block 2578) failed
[  363.015706] binder: 1278:1280 ioctl 40046207 0 returned -16
23:10:52 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xe803, @loopback}, 0x1c)

23:10:52 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000600)='cgroup.max.depth\x00', 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0x1b0, 0x1b0, 0xf0, 0xf0, 0x1b0, 0x2b0, 0x2b0, 0x2b0, 0x2b0, 0x2b0, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00', 0x0, {0x4, 0x6, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@broadcast, @empty, 0xff000000, 0xffffffff, 'bond_slave_1\x00', 'gre0\x00', {0xff}, {}, 0x8c, 0x3, 0x1a}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x2, [0x2, 0x240000000000000, 0x93, 0x81, 0x3f], 0xffff, 0x3, 0x80000000}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

[  363.105242] FAT-fs (loop5): bogus number of reserved sectors
[  363.111130] FAT-fs (loop5): Can't find a valid FAT filesystem
23:10:52 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8847, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:52 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  363.153622] FAT-fs (loop3): Directory bread(block 2569) failed
[  363.155509] binder: tried to use weak ref as strong ref
[  363.159694] FAT-fs (loop3): Directory bread(block 2570) failed
[  363.165100] binder: 1313:1318 Release 1 refcount change on invalid ref 0 ret -22
[  363.172995] FAT-fs (loop3): Directory bread(block 2571) failed
[  363.192528] FAT-fs (loop3): Directory bread(block 2572) failed
23:10:52 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:52 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xbb317eae, @loopback}, 0x1c)

[  363.202916] FAT-fs (loop3): Directory bread(block 2573) failed
[  363.212731] FAT-fs (loop3): Directory bread(block 2574) failed
[  363.223462] FAT-fs (loop3): Directory bread(block 2575) failed
[  363.234031] FAT-fs (loop3): Directory bread(block 2576) failed
[  363.243641] FAT-fs (loop3): Directory bread(block 2577) failed
23:10:52 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66610a000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:52 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x6800, &(0x7f0000000280)})

[  363.249749] binder: BINDER_SET_CONTEXT_MGR already set
[  363.255094] FAT-fs (loop3): Directory bread(block 2578) failed
[  363.293295] binder: 1313:1318 ioctl 40046207 0 returned -16
23:10:52 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x806, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:52 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x200000000000000, @loopback}, 0x1c)

23:10:52 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000001a80)=""/14, &(0x7f0000000240)=0xe)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
getresuid(&(0x7f0000001980), &(0x7f00000019c0)=<r2=>0x0, &(0x7f0000001a00))
syz_mount_image$jfs(&(0x7f0000000280)='jfs\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x9, 0x9, &(0x7f0000001880)=[{&(0x7f0000000300)="501e3e87baff260ccd399bf65ab36aaf3b40684d8bfd755dcfe45ba794e06b0698812edab656e2d05415a19013be7a9199a21353fefe017d47bc508e6f51ac7c9eae0d1b272baddbd40ff71b777dc84654d0a020c77b3ae7beca68d9a3d5b9cce15cc17ba1ef5b874ba2f09bccb75206a45e854eab44b1f13e674f3c96c7dfdc145def9047377c7ea3c0", 0x8a, 0x83d}, {&(0x7f00000003c0)="aee6de71d4107e7154d5ae5bb0f3b5ef1df45e6db4a917bb3026228af9abe10b2f78bef134270a427d1f24dc4a9b4bbf5280f1866f4a2f5bfbddf286d05000a9d1e011944a1079289db5a7abc84aa5078b8d7b5ccc3a4da04d53835e8ee4d28136ab794797559794399894e9b6538fc70bd23cca9fadde21760717a4dcef2040ad43e5c2bd26946afb6722ba6056293e796e82f9dcd1687a08e565de6c16b91dcc4d972ecd23a1be49fae31523cf80c93c75d3677ba449d6deebe37e887c3944eb21b1d5e43d05d19feb0fb343cb17183dec4079a29c56f0d68a3ff7b21e0f056d3e", 0xe2}, {&(0x7f00000004c0)="fbf4d2f7f3b025925e843ff00f0173e7ecc2f663058d59a0e1301a79d3f35ce664841164f3c50e12c83c0969c8f19dc5bc55318c565b80386aa6897d04f1da4b08a3", 0x42, 0x401}, {&(0x7f0000000540)="cf4fda1143cdff294432cf94960710ee1d0da8a2e62599ea79e8e9c2a893f7bc944628266868e20f02cbdf358de973fb3b541b9532994d22780119e1ede6c24af2d9764f153bffffc32351b0cd1d29a48248", 0x52, 0x6}, {&(0x7f00000005c0)="4f611c8afef936d7d5a58c882204ad38cce834ff8bd8f59b2442878dc1a1ca818a4ed639d610ca51cc367a63ecaf0d5cafada9003a64557efc230bbd829d2532826ecea7bbc0ffeb47bea31dd8fb2c5356beef843465a43b619e4986f8fe85b6f54590334ceabcc421311e9b5d9255b96e639096c479915d86bd37cb5102563e6e7302b49b74c70cdef54ee3eb785ee14d57b8c3662fd94377f027935a7669910efd6eb31dfbda590211c9a7e27617bff53860cad8836e9c04c18e42617f64c70820472d84274e486a9bb169b64b61f60141a251a5577ad52e6957a697bc3d906ab3bf9425abddd169effe335162c070ad72adfbed1c5e803c", 0xf9, 0x7}, {&(0x7f00000006c0)="24db0dbf9d6f209d1b2bf293574deba85d801fb21d33d0d9486b20b505b0c0b954e49533da07166571f8f17dd42d0ef44edf1833a8ba0cbc4499638b11f72548a246650038c8453791499bd0e9dff9a53dd65f5deee76803e5ad", 0x5a, 0x1}, {&(0x7f0000000740)="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", 0x1000, 0x40}, {&(0x7f0000001740)="85328142f84d1537101140cc4e50e5ed2c9a6df5c3fc612104b465648d00b36206c826d007a3b46cfa6533929a943d4834159e1ca410dad59eb904433ec1169b30587891277ef409ab91be9a140145e3dc228254c234392da065d6069b26cf41f055b9a9576cd2f036bc247adf27cf0c895238192698350852868876973cd6", 0x7f, 0x9}, {&(0x7f00000017c0)="df7a5e9fc78b5ceaf822c6b2b7d8bd15bf2d3df64d378b1d8ef9fe20b638457256d35c214bd495b4a0916e6be38392f7a7285f02766f5b2eb68269867f130e5920f76336b03e18d0ef26604e6dc76515f92025147b4b4b217c73d36f6ff94e4b02ce4ab826e7fde804e0bebb185db57d847f99dccb22e8f6c7bd8a2c1d46dc38451000aee30efe8381fe46fcd027a35c24196f37fb9a3019ab2023165e6d7c3ec9e8675d9ea0416d", 0xa8, 0xea04}], 0x1, &(0x7f0000001a40)={[{@uid={'uid', 0x3d, r2}}]})
creat(&(0x7f0000000000)='./file0\x00', 0x0)

23:10:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x4000000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:52 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(0xffffffffffffffff, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(0xffffffffffffffff)

[  363.396418] binder: tried to use weak ref as strong ref
[  363.401883] binder: 1346:1348 Release 1 refcount change on invalid ref 0 ret -22
[  363.415348] FAT-fs (loop3): Directory bread(block 2569) failed
[  363.421404] FAT-fs (loop3): Directory bread(block 2570) failed
[  363.427417] FAT-fs (loop3): Directory bread(block 2571) failed
[  363.435703] FAT-fs (loop3): Directory bread(block 2572) failed
23:10:52 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8100, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  363.445734] FAT-fs (loop3): Directory bread(block 2573) failed
[  363.455753] FAT-fs (loop3): Directory bread(block 2574) failed
[  363.465856] FAT-fs (loop3): Directory bread(block 2575) failed
[  363.468993] binder: BINDER_SET_CONTEXT_MGR already set
[  363.475932] FAT-fs (loop3): Directory bread(block 2576) failed
[  363.480712] binder: tried to use weak ref as strong ref
[  363.485907] FAT-fs (loop3): Directory bread(block 2577) failed
23:10:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xfeffffff, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:52 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x4800, &(0x7f0000000280)})

[  363.488581] binder: 1346:1373 Release 1 refcount change on invalid ref 0 ret -22
[  363.490450] binder: 1346:1348 ioctl 40046207 0 returned -16
[  363.494737] FAT-fs (loop3): Directory bread(block 2578) failed
23:10:52 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66610c0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:52 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0//ile0\x00', 0x101000, 0x18c)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={<r1=>0x0, 0x5}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r1, 0x4}, 0x8)
r2 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
linkat(r0, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file0//ile0\x00', 0x400)
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)
ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)={0x3, 0x100000001, [{0xfffffffffffffffb, 0x0, 0x6}, {0x400, 0x0, 0x4b09}, {0x7a, 0x0, 0x606}]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20, 0x7, 0x0, 0x9, 0x5, 0x4, "6709176cc27d6b7d3a4ed4bd528c2a1deb052060bfed94f84af0ccd133e20825b78909bd462c96207480a446133e6f6fc7a2869383d41bd860c43b35c4c32948", "b3adfe079014d4af3ba61a7b302664e406bf57772677ee7d9f024dab770e5c2fe567213c00aa10f81ce908255f3f9313bec5d80353f3835117f02849f6172ad0", "f1371dfc2e31bd94977d841a65888513c0878ce2bd2d84bb92c53e78c302ece7", [0x4, 0x2]})

23:10:52 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xae7e31bb, @loopback}, 0x1c)

23:10:52 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:52 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x80350000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  363.601785] binder: tried to use weak ref as strong ref
[  363.607406] binder: 1387:1391 Release 1 refcount change on invalid ref 0 ret -22
23:10:52 executing program 6:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

[  363.656744] binder: BINDER_SET_CONTEXT_MGR already set
[  363.674524] binder: tried to use weak ref as strong ref
[  363.679971] binder: 1387:1398 Release 1 refcount change on invalid ref 0 ret -22
[  363.694022] FAT-fs (loop3): bogus logical sector size 522
[  363.699630] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:52 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0xe00, @loopback}, 0x1c)

23:10:52 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66610f0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  363.705842] binder: 1387:1391 ioctl 40046207 0 returned -16
23:10:52 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x3000000, &(0x7f0000000280)})

23:10:53 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x200, 0x400000)
accept$alg(r0, 0x0, 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x1, 0x0)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

[  363.759418] FAT-fs (loop5): bogus number of reserved sectors
[  363.765307] FAT-fs (loop5): Can't find a valid FAT filesystem
23:10:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:53 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f737f", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x40000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  363.831639] FAT-fs (loop3): bogus logical sector size 522
[  363.831920] binder: tried to use weak ref as strong ref
[  363.837268] FAT-fs (loop3): Can't find a valid FAT filesystem
[  363.842625] binder: 1441:1444 Release 1 refcount change on invalid ref 0 ret -22
23:10:53 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66612e0a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:53 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x805, @loopback}, 0x1c)

23:10:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x86ddffff, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  363.924754] binder: BINDER_SET_CONTEXT_MGR already set
[  363.934370] binder: tried to use weak ref as strong ref
[  363.939827] binder: 1441:1462 Release 1 refcount change on invalid ref 0 ret -22
[  363.946610] binder: 1441:1444 ioctl 40046207 0 returned -16
23:10:53 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x600, @loopback}, 0x1c)

23:10:53 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=<r2=>0x0)
getpgrp(r2)

23:10:53 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x5000000, &(0x7f0000000280)})

23:10:53 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174740204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  364.003660] FAT-fs (loop3): bogus logical sector size 522
[  364.009654] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:53 executing program 6:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

23:10:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xf000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:53 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7304", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  364.104423] binder: tried to use weak ref as strong ref
[  364.109898] binder: 1493:1497 Release 1 refcount change on invalid ref 0 ret -22
23:10:53 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfec0000000000000}}, 0x1c)

23:10:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x543, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  364.158826] FAT-fs (loop3): bogus logical sector size 628
[  364.164572] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:53 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174100204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x3580, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x88480000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:53 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x200}})
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000200)=""/231)

[  364.227630] binder: BINDER_SET_CONTEXT_MGR already set
[  364.244411] binder: tried to use weak ref as strong ref
[  364.249844] binder: 1493:1522 Release 1 refcount change on invalid ref 0 ret -22
[  364.261843] binder: 1493:1497 ioctl 40046207 0 returned -16
23:10:53 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174730204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:53 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x1000000, &(0x7f0000000280)})

23:10:53 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7306", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  364.287535] FAT-fs (loop3): bogus logical sector size 528
[  364.293243] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x86ddffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xe80, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:53 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0//ile0\x00', 0x404002, 0x0)
openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)

23:10:53 executing program 6:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

23:10:53 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174020204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8035, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  364.419135] FAT-fs (loop3): bogus logical sector size 627
[  364.420199] binder: 1546:1549 IncRefs 0 refcount change on invalid ref 0 ret -22
[  364.424762] FAT-fs (loop3): Can't find a valid FAT filesystem
[  364.438370] binder: 1546:1549 Release 1 refcount change on invalid ref 0 ret -22
23:10:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x6, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  364.556145] FAT-fs (loop3): bogus logical sector size 514
[  364.561817] FAT-fs (loop3): Can't find a valid FAT filesystem
[  364.600344] binder: 1546:1555 IncRefs 0 refcount change on invalid ref 0 ret -22
[  364.608151] binder: 1546:1555 Release 1 refcount change on invalid ref 0 ret -22
23:10:54 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xe00000000000000}}, 0x1c)

23:10:54 executing program 0:
mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x1000000000000)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
fstat(r0, &(0x7f0000000380))

23:10:54 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001404070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:54 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0xf0ffffffffffff, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:54 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x60, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:54 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\t', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:54 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x600, &(0x7f0000000280)})

23:10:54 executing program 6:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

23:10:54 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240), 0xffffffffffffff67)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

23:10:54 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xffffca88, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  365.096907] binder: tried to use weak ref as strong ref
[  365.102419] binder: 1602:1617 Release 1 refcount change on invalid ref 0 ret -22
[  365.112551] FAT-fs (loop3): bogus logical sector size 5120
[  365.118287] FAT-fs (loop3): Can't find a valid FAT filesystem
[  365.126879] binder: BINDER_SET_CONTEXT_MGR already set
[  365.135174] binder: tried to use weak ref as strong ref
23:10:54 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x100000000000000, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:54 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174004204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:54 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x2000000000000000, &(0x7f0000000280)})

[  365.140817] binder: 1602:1624 Release 1 refcount change on invalid ref 0 ret -22
[  365.141469] binder: 1602:1617 ioctl 40046207 0 returned -16
23:10:54 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73aa", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:54 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001000)=@nat={'nat\x00', 0x19, 0x6, 0x790, [0x20000840, 0x0, 0x0, 0x20000a90, 0x20000db0], 0x0, &(0x7f0000000800), &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x1f, 0x20, 0x88fb, 'veth0\x00', 'rose0\x00', 'eql\x00', 'team0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}, {{{0x9, 0x6, 0xf8, 'veth0_to_bond\x00', 'ifb0\x00', 'gre0\x00', 'veth0_to_bridge\x00', @local, [0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xd8, 0x110, 0x140, [@pkttype={'pkttype\x00', 0x8, {{0x2, 0x1}}}, @mac={'mac\x00', 0x10, {{@local}}}]}, [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x15, 0x0, 0x0, 'rose0\x00', 'bridge_slave_0\x00', 'nr0\x00', 'ip6_vti0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff], @random="4771f3de7b03", [0x0, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x148, [@connbytes={'connbytes\x00', 0x18, {{0x1, 0x1000, 0x2}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @arpreply={'arpreply\x00', 0x10, {{@random="99094ce7ae9f", 0xfffffffffffffffd}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {{{0x9, 0x40, 0x5, 'ip_vti0\x00', 'vcan0\x00', 'syzkaller0\x00', 'lo\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0xc0, 0x170, 0x1a8, [@nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}, [@snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x1, 0x8, 0x0, 0x0, "d285a2cb6b27a720e0cd8452214a4468894d92b92f32942c434567551b4e0b8d86b9996fd47214903df59453d0888a3d98937c9294c0a588de6600670febd044"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00', 0x4, 0x0, 0x2, [{{{0x11, 0x2, 0x17, 'ip6gre0\x00', 'ipddp0\x00', 'syzkaller0\x00', 'teql0\x00', @random="1064225b3eae", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @link_local, [0xff, 0x0, 0x1b4f5ca0c2406a20, 0x0, 0xff, 0xff], 0x70, 0xa8, 0xe0}, [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}]}, @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}, {{{0x0, 0x1, 0xf9, 'veth0_to_bond\x00', 'rose0\x00', 'nr0\x00', 'ifb0\x00', @random="89e463991dc6", [0xff, 0xff, 0xff, 0xff], @random="f202b4ad5a86", [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x70, 0xd8, 0x110}, [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 0xffffffffffffffff}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}]}, 0x808)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:54 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x20e, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  365.273342] binder: tried to use weak ref as strong ref
[  365.278818] binder: 1642:1646 Release 1 refcount change on invalid ref 0 ret -22
[  365.292861] binder: BINDER_SET_CONTEXT_MGR already set
[  365.298839] binder: 1642:1646 ioctl 40046207 0 returned -16
[  365.306065] FAT-fs (loop3): bogus logical sector size 16896
[  365.311837] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:55 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xe803000000000000}}, 0x1c)

23:10:55 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x8906, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:55 executing program 6:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

23:10:55 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174030204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:55 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffd08, 0x0, &(0x7f0000000040)=[@increfs, @release], 0xfffffffffffffe9f})

23:10:55 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x4888, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:55 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x1)

23:10:55 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\b', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:55 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:55 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x689, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  365.922632] binder: 1681:1684 ioctl c0306201 200003c0 returned -11
[  365.938611] binder: BINDER_SET_CONTEXT_MGR already set
[  365.961649] FAT-fs (loop3): bogus logical sector size 515
23:10:55 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x1400000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:55 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000304070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:55 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdosl', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  365.967274] FAT-fs (loop3): Can't find a valid FAT filesystem
[  365.974102] binder: 1681:1684 ioctl 40046207 0 returned -16
23:10:55 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

23:10:55 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x806000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:55 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x2202000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  366.087917] binder: tried to use weak ref as strong ref
[  366.093385] binder: 1723:1726 Release 1 refcount change on invalid ref 0 ret -22
[  366.116201] binder: BINDER_SET_CONTEXT_MGR already set
[  366.118572] FAT-fs (loop3): bogus logical sector size 768
[  366.127137] FAT-fs (loop3): Can't find a valid FAT filesystem
[  366.167442] binder: 1723:1736 ioctl 40046207 0 returned -16
[  366.176021] binder: BINDER_SET_CONTEXT_MGR already set
[  366.181765] binder: tried to use weak ref as strong ref
[  366.187198] binder: 1723:1736 Release 1 refcount change on invalid ref 0 ret -22
[  366.195134] binder: 1723:1726 ioctl 40046207 0 returned -16
23:10:55 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xae7e31bb00000000}}, 0x1c)

23:10:55 executing program 0:
mkdir(&(0x7f0000000200)='./file0//ile0\x00', 0xffffffffffffffff)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={<r1=>0x0, 0xfffffffffffffffa, 0x401, 0x86}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e22, 0x1, @local, 0x1ff}}, 0xff6f, 0x3ff, 0x1, 0x100000000, 0xaa}, &(0x7f0000000300)=0x98)
r2 = openat$cgroup_int(r0, &(0x7f0000000180)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:55 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x86ddffff00000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:55 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174007404070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:55 executing program 6:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

23:10:55 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x9)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x8, 0x800, 0x20}, &(0x7f0000000140)=0x10)
sendmmsg(r1, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="bcd0103b9652c47e43d903539ade90e43a8a4265a8075ee8219af9ca7828bcf745375b03e799e88a54adde71d141dc66aba5fb0827b90f8b8f604138d7de78c2d3a6a6a1c4a0726b348f2ddac573d15254212ce1b7f001bf66076c9d744d427d0025bfef5239af74b385aca313b7aaffdd12dfc482f479ec91680057359aa6227dc324093f232bb1fa029264bc73e392fb4254b0d8fa0293d78fd354b2be5b14acb37e72af864d2ffef67adb01d076df312f815ca0f02f842f7f8b46ba605fc1b9182784846499ae69af8293a6832b0c429142d3bd22cbdba575fdd78520a9fe7c", 0xe1}, {&(0x7f0000000180)="97aab27feb0f2cd9a9d783166b2e04dcf231383931b56e71e063d7471b37d385eee22d5251a5198e8633550c5590fe58294cae9e25ca512935e276ca24e93ad5d2f740b8797c054e83b8bfd72c00a32fc8be9ccc1268", 0x56}, {&(0x7f0000000200)}, {&(0x7f0000000400)="f10805ac4a648482a62a58ee7ac61a67", 0x10}, {&(0x7f0000000440)="72b16e4d8b2e699d9152f5ef9c465b3c77b44bd9f1293f181860f429878fb0e258754087724b6d29b5ef791dff71d44925e153f555161bbf8bf5aa755eba171ab16dcb2f33c0f29309ead089fd1970bef594f7fd6a94dc6fcc24431b76a2855342af327bd0756b34d7606a58a475d5196fd72c45d04de9f3e4b3b9a2f19bd68733444151ef4d6278fd8ec889f6aa63f177d0d714ff8aeda35f7c87e75d0186beea1d0d5f6d2ef384a5e3597866", 0xad}], 0x5, &(0x7f0000003a40)=ANY=[@ANYBLOB="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"], 0x348, 0x80}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="35a09c896323c408b9c0e7761a5a0fb091fa615eca2347a818ba58785d6d697a14e79b2859b1255e60d3afd689", 0x2d}, {&(0x7f0000000940)="cc99394e501bf8c414c38ae9d5560442c3adadd43f92e61627dad495a5080926b68d8a7d044ac107f9acdcf9c3e98ffe3789cb05e926be87a238c4e3cbda7ab3d8de771862", 0x45}, {&(0x7f00000009c0)="9da572f6dabf06dd81aca441364c216e11bc2e4eeb653352ac9bf5a28379ebdf7efe3fc20f704b4c8b6003bbdbe0cb4e2d03c7a20b2e2089a8221ff2ca6c14ef2fbb8239fb1efaa6f585c292311375c414d53a38b8355e8cc1ef623500ff4e3390988ce3db6ac3e994ba8b714948962164db41f5855854ac1f9cf0545d3737a456f1f21ad977e201912ba4cce0833b92f0998cffc1636061620b2a4d10dd2fa09b59f89a2e23aaf529702a", 0xab}, {&(0x7f0000000a80)="a20410da911f25c23bfcb038983d27b38bcf4d18f585fdde327c0c068856b87f03799e83a8cc53a6b33fb0a902ce732bf4af3331b44147ca0fcd5b8d13ab9035cc547023d18a5f7391a716f0d5fb26e2be0a8db50fc0fcd5d69da7f3bfe1c5041a3a6249a1a14dc05e87d93b52e6c77681f7abad6543dfdbd109", 0x7a}], 0x4, &(0x7f0000000b40)=[{0x108, 0x116, 0x1000, "51622ada8453ade721a0b22e5639ad9c9e78773c9b9a19a7ded386e7fd1fccf855548503f723147edd0aae04ce7ff7c0e46e1a10e5de8f76d70fa0ccee07b969db28d6327ab61ee0b2526c328fd98d90bbf5b3a04cd500501b8a8ca4f67d9867bb352f9831b7fca96e5ff55ea9ffab4c800fc2b995c914cbc5fc6de5325786d1575c32c6be93eb471f9f226d38b441efc4d0ef3bac4d75b256649993329f6e1c13eb281d772e47af7bb43ad0663a3e59187fdedea26afc8e17743bea7529bee469dc0c1e0d0ceefff09b183c8ce2d7d1ff119004bc964f3c6f30eb16e370d35fdee2748cf82f161f13ff760d2c8b221763ca"}, {0xe8, 0x105, 0x5, "8839d884e4db30050e8d1bc7817cec9357ec44d64c82509ab3a6893dd3a6a942ebf33a048717525055b3b4fc22527c78f8ddd7ded2d5d7002a452d6f36edefc7dd53b9e42b12900910b368587b56550de08ffd7705b66689d9ed5596e92fe05633d59a08ad1a6317d292174215404b460edef29b930eb0bbf22b63ca726e8234309762340ad841ff24ef96c863fe5595f9c90ec249baeb16bd3807db8168847a6362be0c959be46ce08f0985ad56ac558bad0b16511da517cde957b183426c4ec6d0289d9fba7a8b082bb2482b2fb3ce3484"}, {0x108, 0x113, 0x5, "0fca2d38614e1ed48138a9cd2b70221e8988257014c1a2506be56bca4578328fbe97a74260d33e61c70dcc6b5c2bafb63c98c314cf03e751406843b09ec2e81cf19fbd1eb760d57e62722595da894748605cb903e8c811a22f0a12311bb7cf37849b1d1a459d3666ac1129e6f1bbaf67e19a540abc2e8aee799493a8d4e9233c15016658f3f2f0c967e0410d2d9b3cb88ae10fad6d8237a72691a0b36dabbe20e9c733432daaeaf1e793b4b21540e1a87c1d8702af8e221978f351e4027e0da0729f22830082789e71901d917456e78ed4d5b70a3cef4ec88b4f84b9b5905aa138e2514c084673d2874d3d4984e60120e238ca"}], 0x2f8, 0x4000000}, 0x4}, {{&(0x7f0000000e40)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x3, 0x1, {0xa, 0x4e23, 0x3, @local}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000ec0)="9f2c57e0a5eb6ed658bac72b7883383d8ee8502e4c8751bd8dc1d8b70adb4a018f31d58ff277e22b29c5b7784c729c73bc27f084a3970a6132d6e236faa949a567b59a3049fb2aa1f7c51676b4228ee24113661e7fa220c49b6b9f28a958529cca3f721a0194e7976b6ee261cccd02e8710a4ff976e653686acd119c62", 0x7d}, {&(0x7f0000000f40)="1b0c7dc0c8e8bdf9e08576cf9843fada", 0x10}, {&(0x7f0000000f80)="b935aa8104044d5af963f68080b18178872e05fb6a0ae60b3f166f2b098ca4459d682ca32216d0f8a69bec7ef1303fa4d98182424068ac4f586fa21668615afb854d5faea123b79ba37d63bd95630f4f542f8fdcca9012a62938530d959b24f938d9c61151025f9f4f7925d9aec86327d4fb5b5362ed3aaa0f6a1a92bf37361a3ee7d16cae17211e84e97bf9ad08dc89f7c2e37c", 0x94}, {&(0x7f0000001040)="d96c80d1a3e5433d981f63b30d39bfa3534d484f3f9ebd865e160c93d5f06edd8293c29479de3c091ce4c87ca7fcb5575551ad02af39c8f292c99353ce612f41e2acb75d", 0x44}, {&(0x7f00000010c0)="c70fb37248a1e43f966e71deb3cf3e1bcfb5caf913395a0ba8020a37a151adba7c05ae517229d2f2ceaeb58fec5769ec4db709478233ca3d2ad8ee70970f655cd873a37242ef0e460898a523c4c9f87ed8760fdcecc3facc578fc28f188f621fc21fda2a95c11437f456a88ef8d48d2a1918f07d14fe40b093a4a1c53b161c854196e587eec6c0ac6d3fe7fa35fe0d0a17d28a73c1c4294aca0692ba40875b7726b60fd6f95b49989ce6d33bcbf2a2e58a85b3ab38ed64068d80579f2cac8615fa3a13512dbdcf3b884eeca83a1303db4c2fe0d6010824808fda4475c5cc715af6ce093ccc48", 0xe6}, {&(0x7f00000011c0)="d2676aaa42068de1edb9a8493ba922926b8cb01018d97b337206807a1ac29f56b2eccea3846f671b30c89ee447d8945b22c29836962c1cb1b74271f2e998dcf2160934e11ad74b5603226d63eba372cd1c70a67ba6620c8c7b30f91cada0b26c5dee745910c0b8bdaf753de2e45cf1a22e9f0314062696c580c1e8192be53ae01fbff98fa0b5f12230dd2c57eb5da9d230d5db1e5d90188705d5acaab3bf8045b5e0ff9b2931979c36c30f6db5f3c12bb7544b2710a4291697bc1728dcee674b619afe38552d064ca7665be8587c9d890148362bab6d090b", 0xd8}, {&(0x7f00000012c0)="8139f8989b0529451cfb1c906a1b78098a6881bc9999cc9bf416e08d209976702919b0c81a7583ef7a94efeba61f235af5de38289b8ac60c127a155d984d1823d4e6300d15d0a98cab34fa94d2293b4f8f783dfd3e239a8b594f752855aa59c9e70298541153fe7510e086d6cbda3815597e86bf884acf999df77694b5885f200635e092a0282572c1547d569cd47e0df98c6f7c02e2ae3f9a2cb650a67fcd62e78684c99c88119f7eb7e44441667b4bbafc5286f1e2e32af79be14d706d27df2f9f81bd4f7881e664c876c77c663e0e1c2fdd7dfcaa1da35196aa8e8d6f10da35515dc4", 0xe4}], 0x7, &(0x7f0000001440)=[{0xa0, 0x10e, 0x3, "a69803ebd6babedb232a17c7b84dc86b8190f0aa6db392e0a9d72e00389822233861953739482eaacb0a57113916abb25e91782e416907d8b4952914ee98376b01e3ebdeda13e47c15a9ba1b4a62ccd63331ef3a81c138719948dd6cb74322d3cccf0dd39513a351012cd7e080a9cc644ea1bd350c39c771863494627803a1da3aa0e90bbcd5a12e43ebd6adf7"}, {0x58, 0xff, 0x7aad, "e0fd0475a241086a41df02250bb4d582da2df9890fdaff88144f0fd2b5cf7de31f9b1e6bd7486c472e5e1825be4aa9d615e401f6f8a9ed3ea4942f7807ec180b11722c"}, {0x1010, 0x0, 0x6, "6be828610b2b8353f896372bc9d090e95a9891fd6256624c3de54dbd19ad4e676869c7727d3587cea2c475c0c4e925b7da7ed5b3cacdb9da7ea698d97c4d5340e467bcc834be18c09df8d0e21455b77efe0ea9663389a8d64d6ec1cb466bf06d205b23dba6cd3e052ff38229bfd94526747f7b4effe822970933321b896bd80bc281a7c4f44b75c28b075405c7a56f9b3ce86dfc49684a9b21d6eeb6227acfa60562659c152282117a11035351b225325890a8d7dac15317551c9e208a4e62395e68c4b3593e95518ec616ee9a4ef5d3cf985f097c6eff23c45e6a78c5118d326d4128cc5847f1c9c5a1306fdf83706c24345b8a5cebafdb2e0e026bc4641d7a47a08a0f82a628b5029496ca23ade21cb0ddaa7cdf61c857d20690c49b46d273989a32bdb4b2fde21a9fccd341e349d67807e87f56c276ed4aee7e71134ada089a05757094173d27015dd5375a3a9dcbc1cacc843ffc3b7ffeac1500c09152629ba2604010c21718e628a312280aa5bb317ed233cbaff04192d68c86149594040198a99316b735eb038bc322c6f61f6aeb6c58d6c42ce398e6c369ea3c00ee9d4507f3c50d827ff64e7f6767e564e3d67eb9f78fb103baba7c7bf5ee312bc509ae6e3a63f325231fee884d8d5a0b0f9aaaf8b1a11f1181b8245a9523c22f629824d0c437eafc17cc8712ff28aed24a54a3f375bc2fd04b92a3ff41197a9b58119a68203137541c71837060283272fc792c81e46a0c861bcbf70afed8aa26d2edd0856084aad8ebd732d28ea513aa188842157d5259d31ed52a86e6fb325909082122defd6457b86e96372c230643c2e1f4b31186e3c1bbb1b796a0f0794ec508b4ea2bd7b0c250331636d7dfd0517bacfa2da0c296730e54fd34e5bdc077710d25f9f04f68537e93050897506f3a4d6e83d74b7460cf92b3919b644070193603d2a7358c94ddec8091b6a57e3ff47eecacee6e274fb659cc65104baed3d5d10431a2949d5def09eaaeffa5b5c877513a892abc394b16bc2d5220a4d7f83217d21c52bca5ec95d30cbf785f5dc831ca9e8192cc0d9f359839a376c821a27d7850b709908adeb2e2c5a4a75392cc9fceb0a24340faf38a6c718d2290ea7695ac5be1f0343da8a2d7aa920df999269ff9a1852f8fdcf3aafbaf359d4b54b6a1dd85c96be2d6994a9ce3765af5c57ea3c62d3c7cac3be91433e67d98a2f08724bd0a827ec2932c0b76be454d61c49d5b6a76e65e660b39781a2239a7fb7225a3c414462deb5474945628f4ca0826a1094dea150d784711de40c881847aaa9b4a42e773f847df8c9ef6941166d2bf7a0de4f8ce9e2c7488cf5deb2da6b6661091561a8e0c2e7fe966cf40f4082274b97891028203d5604d4d319cc13a86ba4b5c7c53d233bdd2f18101c0b816436ace189d023f742881d1d02ebad029629c5db7cf10a67458da901f2ce7b90addad868553f70aae98428e996c5f419a9685be91a97d1edca6332017aa5bfadbafeaf6863056539391544e2a5bfc052731bcc988381d724a677ad90a7683c235c5f92600f680793e2811a6e5dd40e2b7747061d6b560965caee4900585b656ddc1d563849eea8b66e9cf1a48d66dc944260bea6f493bfc46e311e3254f4cf5c84c0e1d3d2b0729c47f4427936980afdac53b80aa116e0cf40bdd9fca4dd7ffada781ed5e2c369a847f2aa0474fad2ab2564b0d3f1699e2fa76dc36d9037322048587b78b3d51482ecec5f2f7bbcd74dac6e3eb2b86b6fc73533db4cbe036a4588bf6f498caff2b1ea71ea18334925b1d56b383041c6faa7400bc5fbe50bf7076a7a191dca37bfe149ba791eaeb91f704b8b083578984999f4cf53297841a5fe74f5efd10cc32a7db16f14add44fd7c9eb2a81c0d594ca810387eea22371b746485f9ee9427bab03e5806b0724419f98b5667769f50ad890ac907c489aa81e8354a400f2f8757a3d657a26ffd7713d9e7c7386a0fdf80dac0a49272f1f3687ac3dd4cabe311cf6a8c23d6bbdfd485e9401c02b0fac3f4720c9a198fc476dfdba4a043de47d84eebb930f4f1d2b1ca6fa29e2fa6ab68aeb55d18ac36160595fb8b76f4a778b6fdf74905b05551fb3d1b1d77ab2a7ba0847e3383435a4820af977d0167ec39159cc375ba651cf49461ba1f03264036803ef872fd33bc981746f92ddcd0c068fdea0ed7e8898cbcaa7e6627dcb733e7f732872d93850e602ae09a1a797129145a0c886f00994263334554e5a19bba79649f6664ad07724b9dfc14bf0880c0ba1098c0d0910a4e18dc0744d701e2b1bda4ce2f0819e826dc59fd24d639dcedc9965b5c224c57a130e8ec1b7ebb09d2b8aca6334a0a77b91a5872ee88d1bebe9a6632136c14f2bccdeef890ab7fa6d5e3018319d206fde1316397baaf3a4303a77b3c339b1e41fe6c0559975015011a93a76eaa999ec0fa768908a8307801b34495f4149e2c32f50c83cfd921976163f1b3b243db5ae9d5a49df105672c95e95682ca48fe77abd6c3c9cf895cb88211fea82291ce525a2f6acc930f62a0f1846c6d1bc3779d9e7a0c4642f84f79ea10d601e0e585b41f629030cc82ecae934371383f6056f3867cc92d9fbb60fd659cb0ca567fdbadb4652399d89edfdc953485798fbd0d834f8ba7ddf8196b728c85dc2abb0cc18df1c89fd84d7eeb7992bf5438a3e2cbb0abd2126d5001dd87bc34774e30faa8187eef254b47d36bdcb81a9feb54814a3b5454fd17d410a130eecb18e70e434bebff15f4e8625d15a56d3afd9eb2c271d9b670254b5c221116b0e354540547fda2e2caa9eeed8fe2912431a1ea4b44023b0dbd718a62ef7069e21193c470b4b9319e24e875fe92b76e424475c01e3e67b115c9aa2a8732226add90ac4bf5d6e31707704ca3a5742aa096c9ea4d93dbc1c2432ce1353c36ad91479cec1a2278db24d3b480a141ce6e432162c6d3f92aeb3609705ecd4beafa97d90ee3f5b773e4994ecf9d78c51cbcc8ea9eb24c8ecb3a41caa9f98454f7a1061cccb4c37202bb413fe8a2eed626f63c33f583c73892f54b19ae731d3e745aa3ac7ab786c0d17650be0bfdf2086a7b4eb0d18f83d7a0fa415be1226a9f2d740797317e3e51b82e51ae9ff1fa2c941922f1a8dcb0a7dfd5553917f2fc2d395ef8562bdfcbcdbadc5aff93c92270335bee047a7aafb02793554312b3950a6b4aeb64ddde481e954f79f52716e478ebc12e277d77c6d8ddc9aced6c12e006aa115d442646f8daf0456592472c41e4366c666d840be97e90f524167375a63bf5892bbb297158f82d7981bcbab6e9dd6caeaf458b32e12fc1a40e19e0384f7b6365d0a712167917d485d40bae0e50d3b3178f802f91ad3eb5ea8f7012996c0221d43edae947d4de5d1d947134758c94b698928a8939cf87e99f59bc4c2ee5e626a0e04c09f664acbe4614aeaade40a02b23ede61db3f6e716c5fdcd88399cae6868e0eb619ce502b24eaea67e7bfb097f090a3b1cab0efc5f3b7edc567dea149707a5a8ced297bd686cc61ed9f03f7a18b3f1b8ab6482ae986b872d11011a244dba18227bc9abaa583f1144695efb697648020603c932c968d1a4cef33feaf41a1baffa4064860923c8c8c1e254753d1c4f7f9841c4f8bb4cc9fcd5b8938964f54d1d49c2d811307c33d7efbf6262351d87ad5d5d14bc9dfa69873f2e4418d94dd691c1d850a295e8f24332015637e132d2a7141dd335b77f869b9eb6d89683f61df4202d7a868422cdf2ffbdb53ee02cc26b07c436dab09f1f61c15269b1c34148df2f77a45b47620e730e3ced70b3556ac14313ddf08e97f450850d782a2b9ac2fdfcc9136a69ccb013cd6a01feb96a31527f9eae2bb13df418589f03cff3aa8526d6efdf1d10b8a07b667f4453100ad33a9a2b950b2ab2b4867491f62fb4d5bc5f6b6f31245325e929932a0409859f9c6beab1fea04ba49a9af367d4fd28dd7ddf3484421bebf8ba7f43c0ed6c7f0e3c0d58d6f10c65de7902e0b3df81af9c14a6ab770d92b397a7c88f9fda03bcbfe35198c3718938c4d177eaa2556cce7f09eb8b3ba53352ec745eaf5512bd039a7bfd0e399f287f5f94e0af45e25ce1f39016cd5b16ae26fce519e3caf7bcccef5c8b782b16f9177946e3667563f13469587d95781c2e082a21dc1b773c461e72f18e6b6158d31dec702754478c69d3182512d45a8cf5c5136c00fe945d4bdd422a432c8d775220545b212566d604208ea80b3bc6738c88cfd1654ccd2c97868b3d0faf0fbf6707b0115cc795642a7ab1eb2044918f42c971c7623053d2975ad8c2a27d1e66193b1822b6b2cdc7b271ed8087cc87970153995341196f62dd7d32e8b8fbdf923f7a277697d6c0aa020386b4e5db2a6eae75d2a597dbd1f3599a628dcc510ffabb2a1e1fd4da90b9ff5077d806cd616e1be278d615e0489dbee216810fef556d6e9c23904251ef4007d71f49763e73bfa84c482856c204ba1f79317329589253d1fbeff9bad176545bb21a0da64d513d47754a5136a2c8d7980ebc17b5daaa35ba2971b2600b60901694f403b267bc04edbc0f30a329aa7f6e9ca5c03a2fa88f44754caf0ab6d62ae042fa364a70a714fc74ee475bdedba5b731e2f9b0cf72a1232ba83092b7b57ef0d9cf6b6c87536b07c915242099b5051880e4732e3421821edabec14c6fa87dfd311cd5bf6c9189d0e5ec2cef20b3cb811ca34000267ab2483e47b1abe11c3e55870358bea8dbfda3f71ba2dd161a14bb0dd7c04f107036996029581929d100a72e56c2f83c83344de11448b2ffde993f9fece3c2b8cc01bac07c13ca7cb446c69b5ff5b5943170586656a3d4023f5bbf16142ca14c2f802587c64a0809a18669bb8dd81ea166240769a2b88859ac79111b966ca569bfda750c46c13bd8f734a51718a7a3f17fdd87a79dcf61b61e1d94b00ff212eb06e5834d51efe0e80b0760622dbc8d954557b5415a6592d5ae93f7d09e85af7687a02b75bbd1add042ccda2089608f29eca0a94e4c844c09f4fc9d62ca5dd6cddf2788f33a3d7868251fd830a5f64888c017483247bec0e0cdf45a3f5c60014de4e4aa25410d5256f7b7ec0fc5ae7cc799063a1710acfe780db4c5e1c41308ce6742045409776a727b458f6cf9f804e1a0b3ff0a278b896dfc695a7ff1f93f17a29d706603cafa80c7900b2d2074b04a50ce545413bd2c39df91c3f88318f1952771eb7fdded7a95ad425f45caf907ccbbddf5f72c5e25dafdfb21cb495a292e9b214f258877931913abca88f39d3a06d8dbbceee25ca28475b617bb992896f85fee79ab37df2150f625f4b3fa863086abaf31cb75a7b2e4a22b8092d5561420e91653a53a14370829094511de44d300b3cf1676c6f17475a8dadb96383f3b395ea6c91a00ad8fac990a9091657dc493d1cde39824dd6623e794bb7ef0e025f018058c94e15174960aae365576a7d0a961e059986c9dec2dfbaee8cf09767eee68bd32e348a264b4f7fd8d944d319a5b3a6e0c1a782910207793c573df272c2663bf8dbecc74fb32eaf99a7755b165d1a172825d93f3eaae4b48adaf6d209b2bfc980c9b06bf9e49773519c75142c0cd93cb680622ba0494aa684f3705190a7802543e1e504687f7daa42a788d4196ad63e903636e3b7771b3524bb76cb6550608939b3802acd956ca3c5176b14fbdc868b854d04f0ce260acb53b09e09cd25f06d036f8157eb1546a0ce70e6af4f87a44f080f55ec36ee3823b25dc7e83ae92da29db5d3802ca6caa4df2f43ddb31ba16e64d67"}, {0x1010, 0x119, 0x3, "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"}, {0xc8, 0x105, 0x0, "477e6726873b00998f604b1bc0547e64956ab5c4a25269eba5fa34af5f9bd3ebcf3c6cca24bb8f3bfae78ab7dee5322b1960ae2ec603bcd9174fd6fc5ccd830717c3ffe450c186bdc26de42fb8da6d56734dc021be1187c59345164bddf5905c899f6a9d1d7bfd94c814c3ac841761c4bda68b8db6a1427689b6c203247fcd5f1864817e77ca26739a7aa9f65986e4f52e02bdb61f8479a53f6561cf3b2ae4e5e5d2410f8fdc238c9670a6b3d4007526b1"}], 0x21e0, 0x20048001}, 0x9}, {{&(0x7f0000003640)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000003780)=[{&(0x7f00000036c0)="1f85d631c961eb5e846a7724942de68265a9f7d763b3196aac2f493d0fc1b3447fb7ac578679bbfe0273ff640d2071e9391531c305a13768f0ea8e557a98a41f417d1a2d61d9b44d6caf0fd7a6b4f146f93249d74597ff684a57b576e992", 0x5e}, {&(0x7f0000003740)="d88f77c2592199b681615e24890053c6", 0x10}], 0x2, &(0x7f00000037c0)=[{0x98, 0x10a, 0xd0, "2123b45cc158df707881a93dfd774bb509f42ccffd84fc80dd6155a527f35ff317b37b24dbbf65c4c125f25bc2fd617664cc8c12a5a6bba2c16d29bb44647722117ad07b57bf3113eb297d45d5d2390cf491eb301373754a224dcf83e95ea6d4232817596f1349d8613e69cfe7fd7491fa55b95848ccc0248c36c88923e1cf7067287d96"}, {0x20, 0x0, 0x6, "7cce28dce937ac153f"}, {0x38, 0x117, 0x10000, "cda5b85c79c9327128ab4bf6569e34cd19aa499797797701d7b8f250f35f66b823"}, {0x20, 0x1ff, 0x0, "d5b4b03178b79b4ed61ce0b3"}, {0x68, 0x11f, 0xc6, "555ec3462966ea1c0f0ae9f6376c9e8f9b85795cb4019d375f17c6f54df46f591982c1f34b6a30a9eca4999b21c000116385b34b4e985578eabed87ae473cb0b69ca45c8dfbcaeafd33b5b39af90615f26e7b9f0b25e"}], 0x178, 0x4008000}, 0x20}], 0x4, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0463cae3ac74de13c51a0440000000005fd97417bd6d4cc39483bdb62f8194a1e272602a019e411f9186169649d225f8494b8d95d2e905f5be092426f7b468ee7fb8c7f48db56d904757bb7e1daaded52f8e933da292eda2c0405484c9dc0d982268aca5142db02cf846b862000000"], 0x0, 0x0, &(0x7f0000000280)})

23:10:55 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdost', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:55 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xd00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:56 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xb00000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:56 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  366.765577] binder: 1760:1763 unknown command -473275644
[  366.785890] FAT-fs (loop3): bogus logical sector size 29696
[  366.788857] binder: 1760:1763 ioctl c0306201 200003c0 returned -22
[  366.791685] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:56 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174002004070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:56 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='memory.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:56 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:56 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x5, 0x5, 0x4, 0xfffffffffffffffc, 'syz0\x00', 0x3})

[  366.834761] binder: BINDER_SET_CONTEXT_MGR already set
[  366.846381] binder: 1760:1778 unknown command -473275644
[  366.860226] binder: 1760:1763 ioctl 40046207 0 returned -16
[  366.871081] binder: 1760:1778 ioctl c0306201 200003c0 returned -22
23:10:56 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8035000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:56 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xd, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  366.925531] FAT-fs (loop3): bogus logical sector size 8192
[  366.931523] FAT-fs (loop3): Can't find a valid FAT filesystem
[  367.006477] binder: tried to use weak ref as strong ref
[  367.011963] binder: 1807:1809 Release 1 refcount change on invalid ref 0 ret -22
[  367.030564] binder: BINDER_SET_CONTEXT_MGR already set
[  367.038349] binder: tried to use weak ref as strong ref
[  367.043815] binder: 1807:1813 Release 1 refcount change on invalid ref 0 ret -22
[  367.065782] binder: 1807:1809 ioctl 40046207 0 returned -16
[  367.071806] FAT-fs (loop5): bogus number of reserved sectors
[  367.077695] FAT-fs (loop5): Can't find a valid FAT filesystem
23:10:56 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xf5ffffff}}, 0x1c)

23:10:56 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x80000, 0x0)
r1 = creat(&(0x7f0000000200)='./file0//ile0\x00', 0x20)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0xc5, 0x8, 0x1, r1})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)
readv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/112, 0x70}], 0x5)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80003, 0x0)

23:10:56 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000a04070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:56 executing program 6:
socket$nl_route(0x10, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

23:10:56 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xb00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:56 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x88480000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:56 executing program 7:
socket$bt_bnep(0x1f, 0x3, 0x4)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x420202, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000200)={0x8, 0x3, {0xffffffffffffffff, 0x2, 0xac, 0x2, 0x969a}})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x0, @tick=0x3, 0x86bd, {0x7, 0x4}, 0xfffffffffffffff8, 0x0, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00004944c15a60866d"], 0x0, 0x0, &(0x7f0000000280)})
uname(&(0x7f0000000000)=""/231)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000180)={0xdd1e, @remote})

23:10:56 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7386", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:56 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x700, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:56 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xfffffffffffff000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  367.625122] binder: 1836:1841 unknown command 1145634816
[  367.634383] FAT-fs (loop3): bogus logical sector size 2560
[  367.640198] FAT-fs (loop3): Can't find a valid FAT filesystem
[  367.643156] binder: 1836:1841 ioctl c0306201 200003c0 returned -22
23:10:56 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000f04070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:56 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:56 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x74, 0x0)
accept4$llc(r0, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x10, 0x80000)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)
link(&(0x7f0000000280)='./file0//ile0/file0\x00', &(0x7f00000002c0)='./file0//ile0\x00')
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070")
r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000000000e630c40"], 0x0, 0x0, &(0x7f00000001c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x0, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$KVM_NMI(r1, 0xae9a)

23:10:56 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8864, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:56 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000001880)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff7f, 0x24c00)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000001600)={0x0, 0xfffffffffffff291, 0x100000000, 'queue1\x00', 0x4ca})
getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
sendmsg(r1, &(0x7f00000015c0)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random="e889e112b2d5", 'bond0\x00'}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="361e8a350a43b6f3e7f6de9b0fffc0c7943133be9d517e5b34c2863fa0436ad8ceec4418c518286d2244b7f94501a529134c817a5fc70cacb4129dbba91baa41e25d3c0e91b859222c108e0463974e7982ac638ecb4152b9da10a0159f966565165b113214a9938b47ae4db260646c969e30ad4b9d59c2f553447a7863a5582c3c2468a64b63dfaa20446eed6ff96871a71a8ecc7fa6482935e4a97a65a529a5", 0xa0}, {&(0x7f00000003c0)="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", 0xfc}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="10100000000000003b010000000000005ecbef7396ac354644bb64493b801e33439441cc55c290e5facb6a1ae33195ae0315e07566f0081374b5286d55cf77a1f5005804f02f0b9f0eb1c9662237d5cce73886d41abd0d2927d1680a950b00e5a83b468b98752e8fd9da75e9fd9582bc11fb0f74d34f3cc2a0be974e964427dd3791816113734a6d9e12c7473891c87d7ec683e3280642d51c00c9a8da6514a651d06604a34b88f1730ee8060ca2c9464ed5e3f7766ee6a4455f958c3048a1624078db3eda233c4700730a4bd725a437c94ff05f37ef1dfb778c3dc48617e6a679b0fbbbf51758b3696d1ddc2c5eb0c87f0d85c66984b5ad3e2494ca6cbe833a0d591c61df144c3441a19350d20b524c6de893db036edc7987cb7bb799e566c49bf530548af1bd685bee4eef91e9cdd193a801d86b866fdc83548d606e28ac0e12a96d0cb18a59ae5ed795d38d9a3d6411ef69caac0bbed81fb4f9f29b06e050328c622ce816565d49ca306af14727db64e6831d3f87a64a0ac032bb03dd80f6dc7f3c63507bb6b12eed02196603c7476b0bbc3c5a1c58b004a1f9dc58723316bf112579d78c51bc4d72ed6e5f40f498fb388b52de5f9244f4e47799cf786d6905ae78ace0e0b4141d5a75d5d7d47bedfb4c5561406f38583a1954078850ef960375e3fde2421ecd46af7a60323d5f94c3595371390d15299918f73bf797db0fe780efdb3db6180f5a4272cabaf9bbc2d0aafd2113f00a7c899891c2166fc5a27b058b52c640481738f01ed01600bed3557e1c5a682596125ccaf869e76022d9b12ffe390d9e66cd64a20c3945ee8ceb8032a6251cd73a42e98c7c9096d6a48ea9736f2b4396c648011c73ceb84a033e1b2100f9d81e5d9b19ad146ceb107a6b70a6b3d9e0cf6da11674db15ed998c840bbcf4a354598f2a66575a58e9dda4bc48c40fad6c66bb6661cd071b132d3f1a4f45e53f37e4b5788db67d837960259cd341c323c80cef6b1e69cd742e51347e6514234bfc1ca354d3b4a90b19feb1b27e7dad69d48bdcd66b01618c9851cd6d5c87580c0325173bcd0f5755c646e3b064295ef7bdc1fe8937811e04dec0de29e4ca77654a235a5e6fefcea2135c5cfc3aace8d7444f370aef94e368e7baa68ef16b64c241e33cbfa476b5a5e8fca7388450391272c0d9ff8079a724c89828a2e637f668bdc34ba5f1f96d79f8c92999449c938539690b7ce37ddc4f9ce92211763d4f72991f104e137dd40db31e0e9f344b758aeb9586b989689ca555b9e20e13727f1e5f50acf0f6a3d4493d9aa79e2e79c8a62dad07ee01fc2ae8f22741b5abb28ebcb82a3fdb1b5bc0a222f47e71a7b272ce568e42fe43be216fcaa13b8a83575f02ab6f56f92c5025d152af4810fea27874c7b2cdd242d6ce0f0ee1461dbe3ab908852d3be07864debafecb688c7f82002f9854e165aebb7eb795badfdee8f07c3c574f05f36eae1bee7c4b2ae4d85c765846fe3878b8e5c5a5768e495748900d29467da87124439b6cb9d651aa03d568470560b1826f1fd6e7e247916a91d8c2721f88e9721877b59ebca3a71022d512331ed6d3a5e764c42773b38cf94441bda77643e59514743ff3be618b9e16028f15b3e137483f324deb0e72f2631d51a6ddb081a8e38481d184067893943e12ab8dbcc61d119203dd1a37ca8627d1d49ee47d68eff17a7e8cc1be97b5ea291bddd1537f7340f78f2978ed26339992a7ac4aecb32a5bac582a0c7f450cac31363140d218116c6d0766136ade3453ccf245cccd56dd34299d2fb7edb39d8ee1cde7266e41939dad8080f2e83de6b8d264c238144ecd6f1c2c3ef717bb57b320ab13454946bb245c3c234a40b0c990f8fca87374e9530b2c62f0dfa42841c8d4f5fae2b52254137386d034bd8644ae315ce26b6d1c9c7e92c7749d2ec5f8f694f0d07f341e1220f4377b935f9acc8cda9a3b5c5779344395b506d784d0afc6a62d1902f7ad4ed529f8dd27ae65ef7d0a7bc4d0f9efa1dcbff4d736e8b6aa77b45663189e8981285d2ba6991d2e1a79cb347a6851086b0f0aff7dd5e36063cac4655ad84e89e4d36e57ce28aae1a82c27788d77f163cd86bdcc9ddd97fbc567e4083298df726db3c449fe80c662531f1eb15491907e0907104251a4ae127d62cd94997379d545de30538522de2e6849417089a051ad1caff86e23a2e666af8d6a443218c7564d112d3d9b09985346da0a80aebeb49f40e775820d75f988c0c83270706f2542bb95e2fb72ffc0ea46ff038efd800ff003cc775240ce002513c430328c7ac04f824a39107f0a570da4e0e6112c27ce3a1180cf0f25f7de8a7fa5e951f3815b8ff1ec285a5b7d65cd27f857b4575f7f9f1f7319c56496feff10f35273c3c931aa7211fb96dcb97e79213c5076c982a087fc999f12ca633cc43f3d4fde67983f24ad5273cf27f0896f5aa80c820cd01c331ef948ae4a8c89357fbe2eb68e405829ac0db90bb7ab4f895fe2b98be6e21a8755f13595ce04f859f69132c93e1157ae8f9c0aee5c896e343a4e376b7916dc69c6bf5dbc1544b9931991641f42dd1fc4ed143f22e610c819ff4234178e1fccf1b2f969584a1b4ea5ff77103cc080d7c50caeefdb9577542edc8dbb783d3ec60277e53211b25fb25d7927ccebb56cc1a38eb14df744280ce7dde628f36ba0c98ebe9e76780897c5aec0c58cfa57766e8a5f6ebcf25a65a8a81b78a191c4686aae9b1d4f193900a6a695fbee52960c82d3b393f9e9fa211d43ae424f35de30e6cd2904d970330a7f7670b62c20f5fea0b2a8f1d01ba62afe095119d88a3bbe11736743077aa6abc0393600d52584037e6a0948f125d5f8f278b3893af3878830fa066b0190429f62f90114391ca4846c9bb0b21cdb2feb3313d3c1c5ac328f19c2bd9a9c87c340e9d2fffeb49144c7a0c13c35172be5bf2561c0400af2963440ed4babe0dcff7e0c8d81e44a67af6e9139a5764367d8107da1c51d2965cd51fee0cd1df04180448ad290a92254ebb6130be1a838b833908d1ba7bb98568b0619de53861f709a2b8ebb74482a5b0b32f7169fecdb1281a1ea0b88cb453bb80b15af71d4f0c96853ed68704de91200eaaa26447d19c118faebeca6988aebd2a6fc85a02be539b7fb473107df74dcaf9f7f68186315587a8a18245756c75948c439b2337800f61285b47daf3a6bcb0c964d0360909d63f70c79e8318eb42c8504a39ede220e55bcd3f8026c05fcfdbcb832a20b0101dd4ac0188335518a039f450b68354fc5e73e6cb07251229f2d4571b4c7143169c3784db0447a0b81c06260fbbfba85e361b86ef5a520eef79933ee5decfa04b698884e076c703a6f304ac9f6e72bda0c116cd16a7333f7e7677625ff8e7dd70b4dcaee78c421c8159c6ac720dacb3f654efdec24a7ac0bdada33aacb07f392a8068163458dfda95fb97ad824aa100944262dd046ea83990805bb90d1225d61b08641bd82caf62cc62650c7ed220b778ecb20cb58651472833f5894498b37ee232a61c3e2241730d2e07d792d3d078fdb1ef03f39d9e9e4501ecfb74e9820ef6a5a5bba2dd0f551cb30337745e921afa9d7639db30fe41fe04b3807d85631d70b0877da16a644bb3bdb2da3865ca7e47235e8ca37893962717f0140f8b45a066a6b113c76018c2aaddbec57e51c0a1cab106f3986e645503105c4e0cb0407acaab85aaae7a82f5ae17f2163e96357fb95f837ea480980a95713b5b665a69a48b63bfc9fe53d35f9a31af790e7bd29195ecf8eb4c177c3d55a59630b885d0fe26a4a0d234de4e8b7fd710f749816b3d46fa8848df1c67148100e280c12c92053701d37aa710b08acfed556ba719e404ea230cacb9013731880b1dc64d2cfcb4430c15caee6ff20acc90f4572739d11565fbd55ef7f566d428bde137490cd2ae3a15dbfdb4bc2a52e1f092ae566c06d10b9d3ae49239e1dde63cc1bde9d89663a70c1d24f8959a86e0bb2f1358d78821710c204be0b1d86b997ea7bad0c9ebfbd3decc001ee8fdf01bbba443af22b2c5afc7df0c6ba253bf8f5b971395a45aca880a31ce821b775f97cb70a677ea9261601678b53ad53ae2c579e385306f46559d9dfb9506e7d5a0aacf658c01f9af65f2ff5a8ac11375fd526e88cac57fcee92ddd71c3ef83b834496bcba5fca43e2f24423b902c86dd3df5031606c60921b6a6cf7f68cf96101e1795ad81ff43da42d65ddefa11ea502f01475fa5648ee754b9c6c1f4290b1db89b4eb79fc3e9d0e30922dad8055930afb87fdb9107a662fba5ce0219a7d7c00ccfc06b7371fa0d66e09ce2d06c5cf5bad34db9afc08c3211d97fb9131131acae404b4940801a901f405908d2ab49ecc2bad63473bc0c467a5417286e6e3234d58991464a9eb132d9bdb2d2cf9dbd77430208a7193d3121b97b558381e96af7607282930b7237bf45580e440cff705d65545b5bee2beb080321e7941a1faf20fe9088542beb0aed8d78ec2aaf0d9a7dfcc8aad37507579a161ca40321ead9d610cb0123f71c862199aa34c10a2253d8bb5495a9c8563d2ef8dab9ecda0abf7c8b55f719449d0b88eb063a3e23e957a0a58f52e103dc58e855a69617cd4df539ea60a0b05e2147107d41b2a21e0ba538735e318f601594e7f797ba050fb653d4a086c967151272d3a9e62e16e1261efc510db2413c9013ff4478c40799f12ce7c5a838b950b9a4812c44e62c7214487334b95e11966d7ccee31b6613f7329d54a953bf2d6bad8d21bc6639762053d5065d937ad89f47615f7cff99a0878bc8006943a4a70d7534023d46a64a25cbdb48ddad44307ce4189b564175233ca289f73e20836eb4c5b40c891f523374dbf80aba6d483324e5d6f6b16c44ec49880b9a99b86cee8297ca1d49edfbb06ec44e99656c6224c9ab7750a9a3dbf34325a9a37086c54c21b2f8ae8f1f436f17bf45924205497c59b3d361267901cf450bcef84b74f4eef30d8bcedb54f110e8e0b3f28c58f97b75cdf0304e4ac37681a1c3d971df29d77c0453b41c39c34a31869521d9a3acc03d2e44298a796596d687363d03e6ab3430707a66d59247be2974414be90cf7ee2def91094ae306da557d32011e8360edd5804e5fc805e63e1940634d0d193f5035021088d77a68432e0823d1c61dfeee5a8954d84009e26a1cd47172e3b6fd447789b745dbbcffc96b5778898918f684c0977427dbaf5a57de868f4cb20464f72ac11c2e50a047b0a1a700cd945bb382d1d628a0a4643f0489f70f4eac926f761bb3c97388af617d99d9bbaf1be80f6d96f15abcb8b7e7d8f2c3831ef7cbe2b3680ccb0bd076a36d8ec6d03432ca596557549160ea12a3a0dcdf89bbc0e65869f64aa791db8f5822fbc2c6c4cd8d8cf0980bef99da730bdda8d57a7f2e1788f23db9334c9ec626ad54e1031ee7c0bce15d48a72f3fb4b789803e27dbbc66c7bf109958d00d6baa050c1eae3bbc99cd461f64f01e5afd8524d5faa5b56f4002c1037a6845e7820ae5f47d2513d3d6805472a7e5ca6f059149694cf484ef886f3b8e6e88994104117c6b39bc372b1c704e0e1c1ad38ab1d971eda3daad32d72a8cf23d56573331c3519a6bdb38a06131c0a4a7e2c8849a16681476ad6e610f2452da333595a03e14b68041f7788241496ceb5fb606ba3ef997497512995c50288c41af9ca10e3ddb248b8ccac13f8b3a97791c19441b22aa183976c18aa17afd8e4b2e4b42cd2f0eed38d87a23742dd4daf1b057e18fc74fc6e73a5c2c312fb2569c0f5c993da6765f034288fb05f1000000000000000ff000000ff0f00006800000000000000ff000000040000000a9dda84173fc954f266340a145bacc9c6834250e7c92f5c0013a94a60543140f954e592e7416c699d4178489278ed5573e748faacc3c7c880efeb77096bd72b6d16033c49c67c09f7a086b9accafabf8c55e20000000000"], 0x1088, 0x4048000}, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, r2, 0x3}, 0xc)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="5f3472e0ca31c6751297284b32623b21c49245ea4441bac719c6db57f0b4a866487f19b6f1a4dd8955d4911f727894e4b950465b5014308653585a911d398005dc390546e95536ec47d889f5", 0x4c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000016c0)={<r3=>0xffffffffffffffff}, 0x117, 0xe}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000001740)={0x15, 0x110, 0xfa00, {r3, 0x100000000000000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffffffffffffffa, @ipv4, 0x6}, @in6={0xa, 0x4e22, 0x6, @remote, 0x525}}}, 0x118)
eventfd2(0x81, 0x800)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000018c0)={r1, 0x28}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0x50, &(0x7f00000001c0)}, 0x10)

23:10:56 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xfffffffd, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  367.684820] binder: BINDER_SET_CONTEXT_MGR already set
[  367.690211] binder: 1836:1853 ioctl 40046207 0 returned -16
[  367.714226] binder: 1836:1866 unknown command 1145634816
[  367.724883] binder: 1836:1866 ioctl c0306201 200003c0 returned -22
[  367.782055] FAT-fs (loop3): bogus logical sector size 3840
[  367.787864] FAT-fs (loop3): Can't find a valid FAT filesystem
[  367.848622] binder: BINDER_SET_CONTEXT_MGR already set
[  367.868595] binder: 1875:1886 ioctl 40046207 0 returned -16
[  367.899972] binder: 1883:1889 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 0000000000000003
[  367.913191] binder: 1883:1889 got transaction to context manager from process owning it
[  367.921439] binder: 1883:1889 transaction failed 29201/-22, size 0-0 line 2845
[  367.929560] FAT-fs (loop5): bogus number of reserved sectors
[  367.935470] FAT-fs (loop5): Can't find a valid FAT filesystem
[  367.942666] binder: BINDER_SET_CONTEXT_MGR already set
[  367.948210] binder: 1883:1894 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 0000000000000003
[  367.948804] binder: 1883:1889 ioctl 40046207 0 returned -16
[  367.960318] binder_alloc: 1883: binder_alloc_buf, no vma
[  367.971390] binder: 1883:1894 transaction failed 29189/-3, size 0-0 line 2969
[  367.979007] binder: undelivered TRANSACTION_ERROR: 29201
[  368.000179] binder: undelivered TRANSACTION_ERROR: 29189
23:10:57 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xa00}}, 0x1c)

23:10:57 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174050204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:57 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8035, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:57 executing program 6:
socket$nl_route(0x10, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

23:10:57 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:57 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x0, [{r0, 0x0, 0x8}, {r0, 0x0, 0x3}]})

23:10:57 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000280)=0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r0, 0x0, 0x1, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:57 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x800e0000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:57 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xf0ffff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:57 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x1c000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:57 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740c0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  368.474112] FAT-fs (loop3): bogus logical sector size 517
[  368.474860] binder: tried to use weak ref as strong ref
[  368.479763] FAT-fs (loop3): Can't find a valid FAT filesystem
[  368.485117] binder: 1921:1934 Release 1 refcount change on invalid ref 0 ret -22
23:10:57 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYRESHEX=r0], 0x3}, 0x1, 0x0, 0x0, 0x40050}, 0x10)

23:10:57 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x2, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:57 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04632440000000470663044000000000"], 0x0, 0x0, &(0x7f0000000280)})

23:10:57 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:57 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  368.529865] binder: tried to use weak ref as strong ref
[  368.535323] binder: 1921:1940 Release 1 refcount change on invalid ref 0 ret -22
[  368.543284] binder: BINDER_SET_CONTEXT_MGR already set
[  368.559929] binder: 1921:1934 ioctl 40046207 0 returned -16
[  368.642053] binder: 1962:1966 unknown command 1076126468
[  368.659362] binder: 1962:1966 ioctl c0306201 200003c0 returned -22
[  368.667277] FAT-fs (loop3): bogus logical sector size 524
[  368.672878] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:57 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xfdffffff00000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  368.699696] binder: BINDER_SET_CONTEXT_MGR already set
[  368.710785] binder: 1962:1974 unknown command 1076126468
[  368.713625] binder: 1962:1966 ioctl 40046207 0 returned -16
[  368.726053] binder: 1962:1974 ioctl c0306201 200003c0 returned -22
[  368.747306] FAT-fs (loop5): bogus number of reserved sectors
[  368.753177] FAT-fs (loop5): Can't find a valid FAT filesystem
23:10:58 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xffffffff00000000}}, 0x1c)

23:10:58 executing program 6:
socket$nl_route(0x10, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r0)

23:10:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x14, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:58 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174070204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:58 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})

23:10:58 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0), 0x1bc, 0x0, &(0x7f0000000280)})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x8, 0x6, 0x2c, 0x44e, 0x5, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

23:10:58 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7310", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xd000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x80350000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  369.289777] binder: 1994:1998 unknown command 0
[  369.309782] binder: 1994:1998 ioctl c0306201 200003c0 returned -22
[  369.327401] FAT-fs (loop3): bogus logical sector size 519
[  369.331043] binder: BINDER_SET_CONTEXT_MGR already set
23:10:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x700000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:58 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:58 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfec00000}}, 0x1c)

[  369.333025] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:58 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40, 0x0)
sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="6fbeb9a127573f470a4b155e7329c32e4eea1e73e8bb15641352fe9b7ce7cb3c11e748192ef010387cf7f77b5c9f8d28aee6aed3674f22d6202220ccbab00eb0c3c63bb093c5173cb9c621013e85cb71ddc4deb2f1e7340a21d5066bb6724174dd8491840b4726d5e4d784ad5c4e599541c17243a1721a6b0bd957d5ef278a1855cc6e64329ab9c7de3c51db86b2afdf2b4bbe9fc2aa45b0cbc6e3ed4ddd1267a18592c77801c0d07b18b54a8eb4b8d13c32ec373b9ac5e3a7a2aa79472e3a7a1e760344c2549fed0e117f228a134270d6f14709ccdb592f835bff6d1e060b8f3b90e7e0183f", 0xe6}, {&(0x7f0000001300)="c5b9cde7fa2da551474a92f1fabc23d44253368f2357b1bcbbc8b80be659e060b54d1d345f3ffb36aa292382bbfa7281267b7a57ec2544a08c44a47d852fd14814d592a85d338a39c2b9c8d077df113853c1b5c55caa9c980e3e38f392f82a3496bc6beb75c6245c13a4284ecc45d84ed9678c65e0481b7b200fbb2ce512315240ed86a9a8a65c19e4ea0901dce657235c6edae9d9cca4d0bce592afa42205dca9c691d8796a3feaa3f9fc5125e7f79341e594f6d07eb74883be8bbc", 0xbc}, {&(0x7f00000013c0)="dfd41ee4873f4496bcc5e26e02654ba367995ff7cbf432e007ea2448b0c4671226714404307c4a4d5cecb1ab651560aaeefaee1ecb5ef71df114374c0d3af008fe5979e5c4db39fb04140b013e5bb5e6b3ce10f44cb841550e505b24d9a2b2d55a079998d87a69685f31", 0x6a}, {&(0x7f0000001440)="bf07cc75dcc630f34fdba250f032b27803c0c65cd5db0ab693b17ae4320ccc6c883c504761653c7b3b93e76d19d7b229da9c0584bdb057ecfda2bcaebaaa818e57d060db462a1466584f7f31ac941acc4550a60c8de39aeec6008fa47669653e83a4e8fb7745a53f89039173e26d002c0438f1ec1ed31a53e9368867f553b66bb9faffc7f826feca934c88881a03b1dfaa90173d24b05962e7d37b9cef940c61707da4397500aa24503eb2860a9a4973f20dad72", 0xb4}, {&(0x7f0000001500)="71e3a527428c7549ac978b5136827d314a9cda20a3d465b1b81f0f98af1a72cd3740fa5210a6fc1d5ff5ebcfe536b8ca1f5dd311b84b63a5999dc8b75d76b62fe6c53edb6cfa264a82475c", 0x4b}, {&(0x7f0000001580)="77b801a9441120a8a4e27da8eff8825b6b62ebd7b015d9efe5c1c623f982d09c208b58370a23b2b786746e9cb44ca17c8904261e0a6335c08dbe602144", 0x3d}], 0x7, 0x0, 0x0, 0x40000}, 0x4000)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x2}}, 0x18)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
bind$pptp(r0, &(0x7f0000000140), 0x1e)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8906, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  369.387973] binder: 1994:2015 ioctl 40046207 0 returned -16
[  369.397027] binder: BINDER_SET_CONTEXT_MGR already set
[  369.403831] binder: 1994:1998 ioctl 40046207 0 returned -16
[  369.414651] binder: 1994:2015 unknown command 0
[  369.430377] binder: 1994:2015 ioctl c0306201 200003c0 returned -22
23:10:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x600000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:58 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:58 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04560400000001090440000000000000"], 0x0, 0x0, &(0x7f0000000280)})

[  369.491528] FAT-fs (loop3): bogus logical sector size 522
[  369.497249] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:58 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x0, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:58 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

23:10:58 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174480204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8848, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  369.560709] binder: 2050:2053 unknown command 284164
[  369.584223] binder: 2050:2053 ioctl c0306201 200003c0 returned -22
[  369.623483] FAT-fs (loop3): bogus logical sector size 584
[  369.628396] binder: BINDER_SET_CONTEXT_MGR already set
23:10:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x6, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xffffa888, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:58 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

[  369.629133] FAT-fs (loop3): Can't find a valid FAT filesystem
[  369.645166] FAT-fs (loop5): bogus number of reserved sectors
[  369.646618] binder: 2050:2074 unknown command 284164
[  369.651234] FAT-fs (loop5): Can't find a valid FAT filesystem
[  369.670094] binder: 2050:2053 ioctl 40046207 0 returned -16
23:10:58 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661747a0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:58 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x18000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa00, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:10:58 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\'', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  369.726809] binder: 2050:2074 ioctl c0306201 200003c0 returned -22
[  369.792184] binder: tried to use weak ref as strong ref
[  369.797645] binder: 2099:2101 Release 1 refcount change on invalid ref 0 ret -22
[  369.823426] binder: BINDER_SET_CONTEXT_MGR already set
[  369.825879] FAT-fs (loop3): bogus logical sector size 634
[  369.834662] FAT-fs (loop3): Can't find a valid FAT filesystem
[  369.858708] binder: 2099:2101 ioctl 40046207 0 returned -16
23:10:59 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x900000000000000}}, 0x1c)

23:10:59 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x0, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:10:59 executing program 0:
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000540)="6370757365742e63707573001acfc1fef4986af2c7c19758e0116f36460c50341e800755cbce5350f260ce01650300d6b47c5f9272d5f59bce8092e9c0bf26395410f53aba3539be41fefaed2ad38363d327ecdfe5586c92007d4e286b7652071b31f577345f6cc77ca01b888b66bb11d8af28a48154e6e93b039de73945f66c635cf18b28fcdba5e771e855468873a45806159a9eb267c05cfbe14d69562aafc5b4fcfee54f9eb10f5ab907a8b085d31081f9cbd8fdfd319d", 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
r2 = getpgrp(0xffffffffffffffff)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0)
ptrace$cont(0x38, r2, 0x6, 0xffff)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000500)=0xc)
write$P9_RGETATTR(r3, &(0x7f0000000700)={0xa0, 0x19, 0x2, {0x400, {0x40, 0x4, 0x2}, 0x2, r4, r5, 0x800, 0x3, 0x274, 0x9, 0x5f, 0x84, 0x4, 0x3, 0x8000, 0x200, 0x9, 0x5, 0xffffffffffffffff, 0x9, 0x2}}, 0xa0)
r6 = msgget(0x3, 0x80)
getresuid(&(0x7f0000000200), &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000280))
r8 = getgid()
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8)
r10 = getegid()
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000400)={{0x1000, r7, r8, r9, r10, 0x8, 0x77}, 0x0, 0x7, 0x80000001, 0x100, 0x1, 0x2, r2, r2})
setns(r3, 0x4a020000)

23:10:59 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:59 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174680204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:59 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x88caffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:59 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:10:59 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:10:59 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xa00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:59 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174004004070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:10:59 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x4305000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:10:59 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_pts(0xffffffffffffff9c, 0x200)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x2f5, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, &(0x7f0000000280)})
r2 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x1)
setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000140)=0xffffffffffffff7f, 0x4)
getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)

23:10:59 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  370.286300] FAT-fs (loop5): bogus number of reserved sectors
[  370.292227] FAT-fs (loop5): Can't find a valid FAT filesystem
[  370.302221] FAT-fs (loop3): bogus logical sector size 616
[  370.307914] FAT-fs (loop3): Can't find a valid FAT filesystem
23:10:59 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40400, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1415)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x7, 0x8, "d000c36fa3f92cb765b4e5caf7ca5d3da094ad2ed59cb41ba8cbcdc64acde45a63eccf284df87fa4cc8d100d348548f0dd61ff246e265b2051ca68c8cfc5e5a274db45a0ef3bdfb36912410029b413b95776cf1f4bec31895485ef94cb01a483fbad926ea537882d5fbbb5f7066bb41a00ff554b7ce2e73767fc812b1198dd1cc25a0248c56b34b0efb62788eb523be28b3558d5bf5ff1ed6875a94e10165c392c360f8cb57f725e4b6f9510c13cc4e2b83b75fa93dbf207cf23944ecdfcca5dbce5c1395e4c94e0a8822403f529630dc305e5cd1680734f169b8b34abb1bb6e7a3aa5cf1b057a1e5de200f117e0fe476680b8c3bb5965c402f18081ddcdf9ea", 0x8a, 0x9, 0x5, 0x1, 0xb9, 0x6, 0x6, 0x1}, r3}}, 0x120)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)

23:10:59 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xa00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:10:59 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x2000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  370.409371] binder: BINDER_SET_CONTEXT_MGR already set
[  370.417953] binder: 2160:2161 ioctl 40046207 0 returned -16
[  370.438836] FAT-fs (loop3): bogus logical sector size 16384
[  370.444649] FAT-fs (loop3): Can't find a valid FAT filesystem
[  370.513545] FAT-fs (loop5): bogus number of reserved sectors
[  370.519596] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:00 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x0, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:00 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x3000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:00 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174930204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:00 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xd00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:00 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:00 executing program 0:
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = syz_open_dev$loop(&(0x7f00000007c0)='/dev/loop#\x00', 0x0, 0x82)
pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff)
sendfile(r2, r2, &(0x7f0000000000)=0x7600, 0x2000005)

23:11:00 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xf5ffffff00000000}}, 0x1c)

23:11:00 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f737f", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  371.110789] binder: tried to use weak ref as strong ref
[  371.116261] binder: 2199:2202 Release 1 refcount change on invalid ref 0 ret -22
[  371.144756] FAT-fs (loop3): bogus logical sector size 659
[  371.150413] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:00 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x806, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:00 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8847, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:00 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661744c0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:00 executing program 0:
r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$packet(0x11, 0x3, 0x300)
kcmp(r1, r1, 0x0, r3, r0)

[  371.164826] binder: BINDER_SET_CONTEXT_MGR already set
[  371.177580] binder: tried to use weak ref as strong ref
[  371.183116] binder: 2199:2221 Release 1 refcount change on invalid ref 0 ret -22
[  371.199984] binder: 2199:2202 ioctl 40046207 0 returned -16
23:11:00 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xb, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:00 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:00 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x4788, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:00 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x40000002)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

[  371.276574] FAT-fs (loop3): bogus logical sector size 588
[  371.282203] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:00 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  371.387889] binder: tried to use weak ref as strong ref
[  371.393349] binder: 2253:2256 Release 1 refcount change on invalid ref 0 ret -22
[  371.416151] binder: BINDER_SET_CONTEXT_MGR already set
[  371.421968] binder: tried to use weak ref as strong ref
[  371.425623] binder: 2253:2256 ioctl 40046207 0 returned -16
[  371.427394] binder: 2253:2260 Release 1 refcount change on invalid ref 0 ret -22
23:11:01 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x608, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:01 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x8dffffff}}, 0x1c)

23:11:01 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xffffffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:01 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x40813, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xffffffdd, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x40, 0x38, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2, 0x14}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000080)=[0x48, 0x20, 0x30, 0x0, 0x20, 0x48, 0x0]}}, @request_death={0x400c630e, 0x4, 0x1}, @release={0x40046306, 0x4}, @register_looper], 0xf6, 0x0, &(0x7f00000002c0)="b0d878dd3acd06bcdc574f217e0a00d62ec10a0ce86e8bf7a996a00f958950e8fce7ff6a18d38a8163a12d40de8309f8ed1cb78943c3aa1eb06fbdce8fb6b793958448ab5543402e14eb37b35d1537c2491a87d26ef1a5f20e40c1dca430903f9b4f783488f679a0e5d6127ee4b97f7e1f219c34accb4c112f40a36a096d3ed51f1f4a7cc2650551b52b726785ed078eaa7e1547053acd73506d7137012ea64e5d8e3e90fed40d055f01fcf2b71701909080c16c16e4f1d8a0e654f9a33d3fa43f56e3f2941d9fdd335a4a11c3982d07e5771c8867e35d84f63c676b5d4be5b2d19916a530f75853b86c32226c88058450b5fd2d925a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0463044000000000f8fd4e819deef03a"], 0x0, 0x0, &(0x7f0000000440)})
r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x100)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140))

23:11:01 executing program 0:
exit(0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0x14)

23:11:01 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174600004070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:01 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:01 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  372.023239] FAT-fs (loop3): bogus logical sector size 96
[  372.028791] FAT-fs (loop3): Can't find a valid FAT filesystem
[  372.036706] binder: 2284:2293 got reply transaction with no transaction stack
[  372.044079] binder: 2284:2293 transaction failed 29201/-71, size 64-56 line 2761
23:11:01 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174040204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:01 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x86ddffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:01 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x4000000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  372.074009] binder: 2284:2298 unknown command -2125529608
[  372.089196] binder: 2284:2298 ioctl c0306201 200003c0 returned -22
[  372.101297] binder: BINDER_SET_CONTEXT_MGR already set
[  372.106723] binder: 2284:2298 got reply transaction with no transaction stack
[  372.106932] binder: 2284:2293 ioctl 40046207 0 returned -16
23:11:01 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
fchown(r0, r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:01 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  372.114120] binder: 2284:2298 transaction failed 29201/-71, size 64-56 line 2761
[  372.116424] binder: 2284:2307 unknown command -2125529608
[  372.133309] binder: 2284:2307 ioctl c0306201 200003c0 returned -22
23:11:01 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x1000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:01 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xf0ffffffffffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  372.234471] FAT-fs (loop3): bogus logical sector size 516
[  372.240126] FAT-fs (loop3): Can't find a valid FAT filesystem
[  372.252015] binder: tried to use weak ref as strong ref
[  372.257601] binder: 2322:2328 Release 1 refcount change on invalid ref 0 ret -22
[  372.276946] FAT-fs (loop5): bogus number of reserved sectors
23:11:01 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740e0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:01 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  372.282856] FAT-fs (loop5): Can't find a valid FAT filesystem
[  372.283734] binder: BINDER_SET_CONTEXT_MGR already set
[  372.333597] binder: 2322:2333 ioctl 40046207 0 returned -16
[  372.415073] FAT-fs (loop3): bogus logical sector size 526
[  372.420739] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:02 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x5}}, 0x1c)

23:11:02 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:02 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174060204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:02 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x88640000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:02 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc8070031")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:02 executing program 0:
exit(0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0))

23:11:02 executing program 7:
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fsetxattr(r0, &(0x7f0000000040)=@random={'osx.', '#eth1\x00'}, &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x2)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:02 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x88640000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:02 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xb000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:02 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661746c0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  372.916803] FAT-fs (loop3): bogus logical sector size 518
[  372.922436] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:02 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x88caffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  372.964176] binder: tried to use weak ref as strong ref
[  372.969644] binder: 2366:2380 Release 1 refcount change on invalid ref 0 ret -22
[  372.979262] binder: BINDER_SET_CONTEXT_MGR already set
[  372.985156] binder: tried to use weak ref as strong ref
[  372.990582] binder: 2366:2385 Release 1 refcount change on invalid ref 0 ret -22
[  372.999255] binder: 2366:2380 ioctl 40046207 0 returned -16
[  373.005077] FAT-fs (loop5): bogus number of reserved sectors
[  373.010920] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:02 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:02 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r2=>0x0, 0x8}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r2, 0x4)

23:11:02 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xf000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:02 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x14000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:02 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174230204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  373.063351] FAT-fs (loop3): bogus logical sector size 620
[  373.068967] FAT-fs (loop3): Can't find a valid FAT filesystem
[  373.130080] FAT-fs (loop5): bogus number of reserved sectors
[  373.135978] FAT-fs (loop5): Can't find a valid FAT filesystem
[  373.168531] binder: tried to use weak ref as strong ref
[  373.173999] binder: 2406:2415 Release 1 refcount change on invalid ref 0 ret -22
[  373.193619] FAT-fs (loop3): bogus logical sector size 547
[  373.199233] FAT-fs (loop3): Can't find a valid FAT filesystem
[  373.206938] binder: BINDER_SET_CONTEXT_MGR already set
[  373.222857] binder: tried to use weak ref as strong ref
[  373.228306] binder: 2406:2423 Release 1 refcount change on invalid ref 0 ret -22
[  373.243905] binder: 2406:2415 ioctl 40046207 0 returned -16
23:11:02 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x8000000000}}, 0x1c)

23:11:02 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:02 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc8070031")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:02 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xfffffffe, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:02 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8100, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:02 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174090204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:02 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000602aec44479b019a8a01ac84b6200820c825ddda76a91b69981e066fba9e9e39a217659e8a1d272c84629d362e327ab57f29f9703c6a12dda2a1f523cb51535d79cbd057f9e16adf49aa2f85f1df9b2724a802470ef385cf30f8b8f715cad09fedccf1ac5123a4ed28e2a3fc82a17fc0e52cf364c2624b7a610cb67830d500f289f47f356836f3fc"], 0x0, 0x0, &(0x7f0000000280)})
r1 = socket(0x3, 0x3, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x3, 0x0, 0x100000000, 0x9}, {0xfffffffffffffffb, 0x7, 0x7ee8, 0x7}, {0x0, 0x5, 0x7, 0x5}, {0x6, 0x200, 0x2, 0x8}, {0x7, 0x6, 0x2, 0x200}, {0x0, 0x6, 0x6, 0x3}, {0x1, 0x4, 0x80000000, 0xfffffffffffffffe}]}, 0x10)

23:11:02 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)="6377642f2e000000d8ad73115ab98f27504ff88b5a598657b4334b8816acebdff1900645e02940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824dff5d66a212ea1c9a31ce9f13627248946b0110ea3dd2f875305dfdadb1ebc4e67ac2a53561cc2414a9ddb3108")
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00')

23:11:03 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x3000000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  373.784606] binder: 2440:2442 IncRefs 0 refcount change on invalid ref 710934528 ret -22
[  373.792930] binder: 2440:2442 unknown command -1689828116
[  373.800592] binder: 2440:2442 ioctl c0306201 200003c0 returned -22
[  373.818018] FAT-fs (loop3): bogus logical sector size 521
[  373.823686] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:03 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174600204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:03 executing program 0:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0))

[  373.834356] binder: 2440:2442 IncRefs 0 refcount change on invalid ref 710934528 ret -22
[  373.842786] binder: 2440:2442 unknown command -1689828116
[  373.855902] FAT-fs (loop5): bogus number of reserved sectors
[  373.861782] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:03 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x543, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:03 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7)

23:11:03 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x89060000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:03 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:03 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174040204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  373.896732] binder: 2440:2442 ioctl c0306201 200003c0 returned -22
[  374.020427] FAT-fs (loop3): bogus logical sector size 608
[  374.026010] binder: tried to use weak ref as strong ref
[  374.026026] binder: 2481:2489 Release 1 refcount change on invalid ref 0 ret -22
[  374.026131] binder: 2481:2489 ioctl 5420 20000000 returned -22
[  374.031417] FAT-fs (loop3): Can't find a valid FAT filesystem
[  374.060765] FAT-fs (loop0): bogus logical sector size 516
[  374.066400] FAT-fs (loop0): Can't find a valid FAT filesystem
[  374.078788] FAT-fs (loop5): bogus number of reserved sectors
[  374.084699] FAT-fs (loop5): Can't find a valid FAT filesystem
[  374.115244] binder: BINDER_SET_CONTEXT_MGR already set
[  374.122953] binder: tried to use weak ref as strong ref
[  374.128399] binder: 2481:2501 Release 1 refcount change on invalid ref 0 ret -22
[  374.137963] binder: 2481:2489 ioctl 40046207 0 returned -16
23:11:03 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x805000000000000}}, 0x1c)

23:11:03 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xfffff000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:03 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174100204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:03 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc8070031")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:03 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174eb0204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:03 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8864, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:03 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x41, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040))

23:11:03 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:03 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8906000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  374.717370] FAT-fs (loop3): bogus logical sector size 747
[  374.723005] FAT-fs (loop3): Can't find a valid FAT filesystem
[  374.736800] FAT-fs (loop5): bogus number of reserved sectors
[  374.742732] FAT-fs (loop5): Can't find a valid FAT filesystem
[  374.759684] binder: 2520:2528 IncRefs 0 refcount change on invalid ref 0 ret -22
23:11:04 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:04 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x300000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:04 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:04 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1c, 0x0, &(0x7f0000000040)=[@increfs, @acquire_done={0x40106309, r1}], 0x0, 0x0, &(0x7f0000000280)})

23:11:04 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  374.767355] binder: 2520:2528 Release 1 refcount change on invalid ref 0 ret -22
[  374.785923] Unknown ioctl 21525
[  374.796242] binder: tried to use weak ref as strong ref
[  374.801775] binder: 2520:2535 Release 1 refcount change on invalid ref 0 ret -22
[  374.809866] Unknown ioctl 21525
23:11:04 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x20000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:04 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f8571")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:04 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x800e000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  374.939483] binder: 2560:2566 BC_ACQUIRE_DONE node 1162 has no pending acquire request
[  374.949101] FAT-fs (loop3): Directory bread(block 2569) failed
[  374.955202] FAT-fs (loop3): Directory bread(block 2570) failed
[  374.961898] FAT-fs (loop3): Directory bread(block 2571) failed
[  374.970660] FAT-fs (loop3): Directory bread(block 2572) failed
[  374.980667] FAT-fs (loop3): Directory bread(block 2573) failed
[  374.990871] FAT-fs (loop3): Directory bread(block 2574) failed
[  375.000968] FAT-fs (loop3): Directory bread(block 2575) failed
[  375.002420] binder: BINDER_SET_CONTEXT_MGR already set
[  375.011040] FAT-fs (loop3): Directory bread(block 2576) failed
[  375.021094] FAT-fs (loop3): Directory bread(block 2577) failed
[  375.027145] FAT-fs (loop3): Directory bread(block 2578) failed
[  375.037334] FAT-fs (loop5): bogus number of reserved sectors
[  375.043323] FAT-fs (loop5): Can't find a valid FAT filesystem
[  375.092570] binder: 2560:2566 ioctl 40046207 0 returned -16
23:11:04 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xe000000}}, 0x1c)

23:11:04 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x300000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:04 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000a04070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:04 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x100000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:04 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:04 executing program 0:
ioperm(0xffffffffffffffff, 0x80000001, 0x3f)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f00000000c0), 0x12)

23:11:04 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x60480, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={<r2=>0x0, 0x1a, "d9729915bbc95317e228e11c4d7121e37d709d3fd4cb3b4592c7"}, &(0x7f0000000080)=0x22)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x2}, 0x8)

23:11:04 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f8571")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:04 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b662e2e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:04 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8848000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:04 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xd00, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:04 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000304070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:04 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x4000000}}, 0x1c)

23:11:04 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  375.606391] binder: tried to use weak ref as strong ref
[  375.612286] binder: 2604:2614 Release 1 refcount change on invalid ref 0 ret -22
[  375.630229] FAT-fs (loop3): bogus logical sector size 2560
[  375.636007] FAT-fs (loop3): Can't find a valid FAT filesystem
[  375.682280] binder: tried to use weak ref as strong ref
[  375.687728] binder: 2604:2624 Release 1 refcount change on invalid ref 0 ret -22
[  375.695701] binder: BINDER_SET_CONTEXT_MGR already set
[  375.701236] binder: 2604:2614 ioctl 40046207 0 returned -16
23:11:04 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8100000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:05 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8060000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  375.779552] FAT-fs (loop3): bogus logical sector size 768
[  375.785178] FAT-fs (loop3): Can't find a valid FAT filesystem
[  375.797044] FAT-fs (loop0): Directory bread(block 2569) failed
[  375.807256] FAT-fs (loop5): bogus number of reserved sectors
[  375.813132] FAT-fs (loop5): Can't find a valid FAT filesystem
[  375.819142] FAT-fs (loop0): Directory bread(block 2570) failed
23:11:05 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000f04070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:05 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="046304400000000006630440ddff0000"], 0x0, 0x0, &(0x7f0000000280)})

23:11:05 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:05 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x700, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  375.825162] FAT-fs (loop0): Directory bread(block 2571) failed
[  375.835601] FAT-fs (loop0): Directory bread(block 2572) failed
[  375.841732] FAT-fs (loop0): Directory bread(block 2573) failed
[  375.847893] FAT-fs (loop0): Directory bread(block 2574) failed
[  375.855963] FAT-fs (loop0): Directory bread(block 2575) failed
[  375.866715] FAT-fs (loop0): Directory bread(block 2576) failed
23:11:05 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f8571")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:05 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x81000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  375.876277] FAT-fs (loop0): Directory bread(block 2577) failed
[  375.886572] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:05 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x4, &(0x7f0000000440)=[{&(0x7f0000000200)="79305f82322b7e32d27a9915cb1bd6b3376731edacc56d62f90e3b77e49b7267", 0x20, 0x8001}, {&(0x7f0000000280)="6bc059b767317b8b210fe2c413921d5c9ef3f0e6fe4811b846413d9d0323a387baf14c3fc05397246d3df6c696be23bb49b75072a49e01b4ee3f9e1f785a162bbe46efc906e950b341166408312e49b9df5ef0b86104708d79d90ebef6dc9cd24aa813", 0x63, 0x80000001}, {&(0x7f0000000300)="42b1f87410ddfc5dc2d7a831fbf6db92ee677dba3c7d8277218edb7a2122ba4233de7cc9d10931790bccce850a44e3bdae9c92dfabaed4db0ba18ce59faf68ee8b8c5f1c84e274f288e102239b5ea92b71bb5f3dad4dc76c1a6c20fec4a8c846d51a76380ceae41ab00082985d006cd5d4cf9ea1682f7093554f3204fd5ef2c94e19d48d093c47410d71414af539613832a12581a05a7fdcd1f80745baafbb4fe6cfa7fae6efe173f1befe07b6abe66abd8e25f09319b8ee6512884011a4af1fa4d334cac88f3c4b08538b7691a0770e77bfe72bcd2fd94fe85f1cf7bbf9877ebecc4eb42dad13ae44ebc0893fd32a77cb37608ba6639328dbf2ed", 0xfb, 0x10000000000}, {&(0x7f0000000400)="d9b51ad7c1ffe326759b05abbaec8ad74c32eaf3ca45cd61d54fd94d89455228a73cd7d02dec3ca0425799", 0x2b, 0x2}], 0x40, &(0x7f00000004c0)={[{@quota_account='quota=account'}, {@ignore_local_fs='ignore_local_fs'}, {@norecovery='norecovery'}, {@localflocks='localflocks'}, {@quota_on='quota=on'}, {@norgrplvb='norgrplvb'}]})
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='pids.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

[  375.927453] binder: 2667:2668 Release 1 refcount change on invalid ref 65501 ret -22
[  375.957235] binder: BINDER_SET_CONTEXT_MGR already set
[  375.962856] binder: 2667:2672 Release 1 refcount change on invalid ref 65501 ret -22
23:11:05 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x800e000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:05 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xb000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:05 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440040000000663ffff00000000"], 0x0, 0x0, &(0x7f0000000280)})

[  375.989206] binder: 2667:2668 ioctl 40046207 0 returned -16
[  376.027143] FAT-fs (loop3): bogus logical sector size 3840
[  376.032848] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:05 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174004204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  376.063658] FAT-fs (loop5): bogus number of reserved sectors
[  376.069725] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:05 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x4, &(0x7f0000000440)=[{&(0x7f0000000200)="79305f82322b7e32d27a9915cb1bd6b3376731edacc56d62f90e3b77e49b7267", 0x20, 0x8001}, {&(0x7f0000000280)="6bc059b767317b8b210fe2c413921d5c9ef3f0e6fe4811b846413d9d0323a387baf14c3fc05397246d3df6c696be23bb49b75072a49e01b4ee3f9e1f785a162bbe46efc906e950b341166408312e49b9df5ef0b86104708d79d90ebef6dc9cd24aa813", 0x63, 0x80000001}, {&(0x7f0000000300)="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", 0xfb, 0x10000000000}, {&(0x7f0000000400)="d9b51ad7c1ffe326759b05abbaec8ad74c32eaf3ca45cd61d54fd94d89455228a73cd7d02dec3ca0425799", 0x2b, 0x2}], 0x40, &(0x7f00000004c0)={[{@quota_account='quota=account'}, {@ignore_local_fs='ignore_local_fs'}, {@norecovery='norecovery'}, {@localflocks='localflocks'}, {@quota_on='quota=on'}, {@norgrplvb='norgrplvb'}]})
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='pids.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

[  376.112804] gfs2: not a GFS2 filesystem
[  376.145934] FAT-fs (loop3): bogus logical sector size 16896
[  376.148806] binder: 2701:2705 IncRefs 0 refcount change on invalid ref 4 ret -22
[  376.151735] FAT-fs (loop3): Can't find a valid FAT filesystem
[  376.159306] binder: 2701:2705 unknown command -40186
[  376.172353] binder: 2701:2705 ioctl c0306201 200003c0 returned -22
[  376.191083] binder: BINDER_SET_CONTEXT_MGR already set
[  376.192431] binder: 2701:2715 IncRefs 0 refcount change on invalid ref 4 ret -22
[  376.204141] binder: 2701:2715 unknown command -40186
[  376.206626] binder: 2701:2705 ioctl 40046207 0 returned -16
[  376.224213] binder: 2701:2715 ioctl c0306201 200003c0 returned -22
[  376.297882] gfs2: not a GFS2 filesystem
23:11:05 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xb80b}}, 0x1c)

23:11:05 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x2000000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:05 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:05 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x600, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:05 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:05 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:05 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f857140")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:05 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x4, &(0x7f0000000440)=[{&(0x7f0000000200)="79305f82322b7e32d27a9915cb1bd6b3376731edacc56d62f90e3b77e49b7267", 0x20, 0x8001}, {&(0x7f0000000280)="6bc059b767317b8b210fe2c413921d5c9ef3f0e6fe4811b846413d9d0323a387baf14c3fc05397246d3df6c696be23bb49b75072a49e01b4ee3f9e1f785a162bbe46efc906e950b341166408312e49b9df5ef0b86104708d79d90ebef6dc9cd24aa813", 0x63, 0x80000001}, {&(0x7f0000000300)="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", 0xfb, 0x10000000000}, {&(0x7f0000000400)="d9b51ad7c1ffe326759b05abbaec8ad74c32eaf3ca45cd61d54fd94d89455228a73cd7d02dec3ca0425799", 0x2b, 0x2}], 0x40, &(0x7f00000004c0)={[{@quota_account='quota=account'}, {@ignore_local_fs='ignore_local_fs'}, {@norecovery='norecovery'}, {@localflocks='localflocks'}, {@quota_on='quota=on'}, {@norgrplvb='norgrplvb'}]})
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='pids.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)

[  376.570430] binder: tried to use weak ref as strong ref
[  376.575887] binder: 2735:2737 Release 1 refcount change on invalid ref 0 ret -22
[  376.593235] binder: BINDER_SET_CONTEXT_MGR already set
[  376.599152] binder: 2735:2737 ioctl 40046207 0 returned -16
[  376.606614] FAT-fs (loop3): Directory bread(block 2569) failed
[  376.609957] FAT-fs (loop5): bogus number of reserved sectors
23:11:05 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xa, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:05 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x88caffff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:05 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000000)=[@request_death, @increfs_done={0x40106308, r1, 0x3}], 0xa8, 0x0, &(0x7f0000000040)="d3f72cac3540e442d6aa2e1604b62ff9d7f70c3a5c1a9e23e4331eb1a924f0ff242590c7af29e1f0df7897e26d5df4eb4fe0db7bb835464b77a6b099a92ba86cb8c9094fd7d8c272efdd75701dddddaa833b3fde82f13f42bb1260dd6ad34f3fdb5d8453691bff9fcaa1119638dbbf9f8c797e2b9f92443598157e4622d507651c753c022e42b0725da080921cc8f9cc48ef9f5e7880fa913514957a329b41cd4a1ac2af8fb775d9"})

23:11:05 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:05 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001404070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  376.612656] FAT-fs (loop3): Directory bread(block 2570) failed
[  376.618451] FAT-fs (loop5): Can't find a valid FAT filesystem
[  376.636665] FAT-fs (loop3): Directory bread(block 2571) failed
[  376.646476] FAT-fs (loop3): Directory bread(block 2572) failed
[  376.652675] gfs2: not a GFS2 filesystem
23:11:05 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x7, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:05 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x86ddffff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:05 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x6000000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  376.748119] binder: tried to use weak ref as strong ref
[  376.753585] binder: 2771:2772 Release 1 refcount change on invalid ref 0 ret -22
[  376.762745] binder: 2771:2772 BC_INCREFS_DONE u0000000000000000 node 1173 cookie mismatch 0000000000000003 != 0000000000000000
[  376.809712] FAT-fs (loop5): bogus number of reserved sectors
[  376.815662] FAT-fs (loop5): Can't find a valid FAT filesystem
[  376.880358] FAT-fs (loop0): Directory bread(block 2569) failed
[  376.890423] FAT-fs (loop3): bogus logical sector size 5120
[  376.890727] FAT-fs (loop0): Directory bread(block 2570) failed
[  376.896118] FAT-fs (loop3): Can't find a valid FAT filesystem
[  376.910066] FAT-fs (loop0): Directory bread(block 2571) failed
[  376.919965] FAT-fs (loop0): Directory bread(block 2572) failed
[  376.930094] FAT-fs (loop0): Directory bread(block 2573) failed
[  376.940068] FAT-fs (loop0): Directory bread(block 2574) failed
[  376.950177] FAT-fs (loop0): Directory bread(block 2575) failed
[  376.960259] FAT-fs (loop0): Directory bread(block 2576) failed
[  376.970216] FAT-fs (loop0): Directory bread(block 2577) failed
[  376.980380] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:06 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x1c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:06 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfc00}}, 0x1c)

23:11:06 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:06 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xe020000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:06 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f857140")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:06 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174007404070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:06 executing program 0 (fault-call:1 fault-nth:0):
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  377.497245] FAULT_INJECTION: forcing a failure.
[  377.497245] name failslab, interval 1, probability 0, space 0, times 0
[  377.508668] CPU: 0 PID: 2808 Comm: syz-executor0 Not tainted 4.18.0-rc7-next-20180801+ #29
[  377.517093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  377.526438] Call Trace:
[  377.529013]  dump_stack+0x1c9/0x2b4
[  377.532633]  ? dump_stack_print_info.cold.2+0x52/0x52
[  377.537811]  ? get_pid_task+0xd8/0x1a0
[  377.541687]  should_fail.cold.4+0xa/0x11
[  377.545735]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  377.551267]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  377.556359]  ? lock_downgrade+0x8f0/0x8f0
[  377.560495]  ? proc_fail_nth_write+0x9e/0x210
[  377.564971]  ? proc_cwd_link+0x1d0/0x1d0
[  377.569031]  ? kasan_check_read+0x11/0x20
[  377.573166]  ? do_raw_spin_unlock+0xa7/0x2f0
[  377.577561]  ? lock_acquire+0x1e4/0x540
[  377.581519]  ? fs_reclaim_acquire+0x20/0x20
[  377.585827]  ? lock_downgrade+0x8f0/0x8f0
[  377.589964]  ? check_same_owner+0x340/0x340
[  377.594277]  ? rcu_note_context_switch+0x730/0x730
[  377.599199]  __should_failslab+0x124/0x180
[  377.603417]  should_failslab+0x9/0x14
[  377.607200]  __kmalloc+0x2c8/0x760
[  377.610725]  ? strncpy_from_user+0x510/0x510
[  377.615124]  ? fput+0x130/0x1a0
[  377.618390]  ? __x64_sys_memfd_create+0x142/0x4f0
[  377.623216]  __x64_sys_memfd_create+0x142/0x4f0
[  377.627869]  ? __ia32_sys_sched_setparam+0x80/0x80
[  377.632782]  ? memfd_fcntl+0x1e80/0x1e80
[  377.636828]  do_syscall_64+0x1b9/0x820
[  377.640699]  ? finish_task_switch+0x1d3/0x870
[  377.645182]  ? syscall_return_slowpath+0x5e0/0x5e0
[  377.650098]  ? syscall_return_slowpath+0x31d/0x5e0
[  377.655009]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  377.660006]  ? __switch_to_asm+0x34/0x70
[  377.664048]  ? __switch_to_asm+0x34/0x70
[  377.668091]  ? __switch_to_asm+0x40/0x70
[  377.672147]  ? __switch_to_asm+0x34/0x70
[  377.676193]  ? __switch_to_asm+0x40/0x70
[  377.680235]  ? __switch_to_asm+0x34/0x70
[  377.684282]  ? __switch_to_asm+0x40/0x70
[  377.688329]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  377.693157]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  377.698326] RIP: 0033:0x456a09
[  377.701504] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  377.720386] RSP: 002b:00007f67699fba88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  377.728075] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000456a09
[  377.735325] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004c17ce
[  377.742574] RBP: 00000000009300a0 R08: 0000000020000158 R09: 00000000fbad8001
[  377.749827] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000013
[  377.757075] R13: 00000000004d5650 R14: 00000000004c8f38 R15: 0000000000000000
[  377.768758] binder: BINDER_SET_CONTEXT_MGR already set
[  377.775736] binder: tried to use weak ref as strong ref
[  377.781227] binder: 2771:2821 Release 1 refcount change on invalid ref 0 ret -22
[  377.790144] FAT-fs (loop3): bogus logical sector size 29696
23:11:07 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xffffca88, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:07 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000210070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:07 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8848, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  377.792427] binder: 2771:2816 ioctl 40046207 0 returned -16
[  377.795955] FAT-fs (loop3): Can't find a valid FAT filesystem
[  377.809552] binder: 2771:2826 BC_INCREFS_DONE u0000000000000000 no match
23:11:07 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @local}], 0x20)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:07 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8847000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:07 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7304", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:07 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x6488, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  377.946533] binder: tried to use weak ref as strong ref
[  377.952009] binder: 2840:2843 Release 1 refcount change on invalid ref 0 ret -22
[  377.971766] FAT-fs (loop3): Directory bread(block 2569) failed
[  377.977820] FAT-fs (loop3): Directory bread(block 2570) failed
[  377.983832] FAT-fs (loop3): Directory bread(block 2571) failed
[  377.984195] binder: BINDER_SET_CONTEXT_MGR already set
23:11:07 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f857140")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  377.992122] FAT-fs (loop3): Directory bread(block 2572) failed
[  377.996199] binder: tried to use weak ref as strong ref
[  378.002164] FAT-fs (loop3): Directory bread(block 2573) failed
[  378.006597] binder: 2840:2849 Release 1 refcount change on invalid ref 0 ret -22
[  378.007021] binder: 2840:2843 ioctl 40046207 0 returned -16
[  378.014857] FAT-fs (loop3): Directory bread(block 2574) failed
[  378.034136] FAT-fs (loop3): Directory bread(block 2575) failed
23:11:07 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x7, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:07 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

[  378.053834] FAT-fs (loop3): Directory bread(block 2576) failed
[  378.063767] FAT-fs (loop3): Directory bread(block 2577) failed
[  378.073978] FAT-fs (loop3): Directory bread(block 2578) failed
[  378.191166] binder: tried to use weak ref as strong ref
[  378.196613] binder: 2874:2876 Release 1 refcount change on invalid ref 0 ret -22
[  378.211030] binder: BINDER_SET_CONTEXT_MGR already set
[  378.217487] binder: 2874:2876 ioctl 40046207 0 returned -16
23:11:07 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xbb8}}, 0x1c)

23:11:07 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xfffff000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:07 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000274070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:07 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x88a8ffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:07 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\a', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:07 executing program 0 (fault-call:1 fault-nth:1):
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:07 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1a9)
ioctl$RTC_WIE_ON(r1, 0x700f)

23:11:07 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  378.677547] FAULT_INJECTION: forcing a failure.
[  378.677547] name failslab, interval 1, probability 0, space 0, times 0
[  378.688824] CPU: 1 PID: 2893 Comm: syz-executor0 Not tainted 4.18.0-rc7-next-20180801+ #29
[  378.697230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  378.698208] FAT-fs (loop3): bogus sectors per cluster 116
[  378.706583] Call Trace:
[  378.706607]  dump_stack+0x1c9/0x2b4
[  378.706624]  ? dump_stack_print_info.cold.2+0x52/0x52
[  378.706641]  ? mnt_get_count+0x150/0x150
23:11:07 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x43050000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:07 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x81000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  378.706663]  should_fail.cold.4+0xa/0x11
[  378.706684]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  378.712231] FAT-fs (loop3): Can't find a valid FAT filesystem
[  378.714790]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  378.714804]  ? bpf_prog_kallsyms_find+0xde/0x4c0
[  378.714825]  ? lock_acquire+0x1e4/0x540
[  378.756382]  ? is_bpf_text_address+0xae/0x170
[  378.760889]  ? lock_downgrade+0x8f0/0x8f0
[  378.765045]  ? lock_release+0xa30/0xa30
[  378.769027]  ? kasan_check_read+0x11/0x20
[  378.773186]  ? lock_acquire+0x1e4/0x540
23:11:08 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x4888, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  378.777170]  ? fs_reclaim_acquire+0x20/0x20
[  378.781501]  ? lock_downgrade+0x8f0/0x8f0
[  378.785665]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  378.790686]  ? check_same_owner+0x340/0x340
[  378.795012]  ? rcu_note_context_switch+0x730/0x730
[  378.799940]  ? iterate_fd+0x4b0/0x4b0
[  378.803744]  __should_failslab+0x124/0x180
[  378.807978]  should_failslab+0x9/0x14
[  378.808520] binder: 2891:2900 IncRefs 0 refcount change on invalid ref 0 ret -22
[  378.811774]  kmem_cache_alloc+0x2af/0x760
[  378.811791]  ? lock_downgrade+0x8f0/0x8f0
23:11:08 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000000000663044000000020"], 0x0, 0x0, &(0x7f0000000280)})
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x40000, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=<r2=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@loopback}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000380)=0xc)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={r2, r3, r4}, 0xc)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={<r5=>0x0}, &(0x7f0000000040)=0xc)
capset(&(0x7f0000000080)={0x0, r5}, &(0x7f00000000c0)={0x20, 0x80000001, 0xa5, 0xffff, 0x10000, 0x1000})

[  378.811810]  ? shmem_destroy_callback+0xc0/0xc0
[  378.811826]  shmem_alloc_inode+0x1b/0x40
[  378.811840]  alloc_inode+0x63/0x190
[  378.811850]  new_inode_pseudo+0x71/0x1a0
[  378.811866]  ? prune_icache_sb+0x1c0/0x1c0
[  378.819406] binder: 2891:2900 Release 1 refcount change on invalid ref 0 ret -22
[  378.823520]  ? _raw_spin_unlock+0x22/0x30
[  378.823533]  new_inode+0x1c/0x40
[  378.823551]  shmem_get_inode+0xf1/0x910
[  378.867200]  ? shmem_encode_fh+0x340/0x340
[  378.871442]  ? lock_downgrade+0x8f0/0x8f0
23:11:08 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xf0ffffffffffff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  378.875596]  ? lock_release+0xa30/0xa30
[  378.879572]  ? check_same_owner+0x340/0x340
[  378.883895]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  378.888913]  ? __check_object_size+0xa3/0x5d7
[  378.893422]  __shmem_file_setup.part.48+0x83/0x2a0
[  378.898356]  shmem_file_setup+0x65/0x90
[  378.902333]  __x64_sys_memfd_create+0x2af/0x4f0
[  378.907000]  ? memfd_fcntl+0x1e80/0x1e80
[  378.911067]  do_syscall_64+0x1b9/0x820
[  378.914960]  ? finish_task_switch+0x1d3/0x870
[  378.919459]  ? syscall_return_slowpath+0x5e0/0x5e0
23:11:08 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xd000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  378.924392]  ? syscall_return_slowpath+0x31d/0x5e0
[  378.929322]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  378.930979] binder: 2921:2922 Release 1 refcount change on invalid ref 536870912 ret -22
[  378.934337]  ? __switch_to_asm+0x34/0x70
[  378.934352]  ? __switch_to_asm+0x34/0x70
[  378.934365]  ? __switch_to_asm+0x40/0x70
[  378.934379]  ? __switch_to_asm+0x34/0x70
[  378.934392]  ? __switch_to_asm+0x40/0x70
[  378.934403]  ? __switch_to_asm+0x34/0x70
[  378.934420]  ? __switch_to_asm+0x40/0x70
[  378.950178] binder: BINDER_SET_CONTEXT_MGR already set
[  378.950733]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  378.950755]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  378.950766] RIP: 0033:0x456a09
[  378.950780] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  378.950792] RSP: 002b:00007f67699fba88 EFLAGS: 00000246
[  378.955236] binder: 2921:2923 Release 1 refcount change on invalid ref 536870912 ret -22
[  378.959295]  ORIG_RAX: 000000000000013f
23:11:08 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x88caffff00000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:08 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x14000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  378.959304] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000456a09
[  378.959312] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004c17ce
[  378.959320] RBP: 00000000009300a0 R08: 0000000020000158 R09: 00000000fbad8001
[  378.959328] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000013
[  378.959336] R13: 00000000004d5650 R14: 00000000004c8f38 R15: 0000000000000001
[  378.978061] binder: 2921:2922 ioctl 40046207 0 returned -16
23:11:08 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000202070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:08 executing program 0 (fault-call:1 fault-nth:2):
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:08 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f730f", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:08 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:08 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x6000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:08 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
ioctl(r0, 0x9, &(0x7f0000000000)="f0864cde1b68dd")

23:11:08 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfc00000000000000}}, 0x1c)

23:11:08 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x100000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  379.555254] binder: tried to use weak ref as strong ref
[  379.560802] binder: 2951:2956 Release 1 refcount change on invalid ref 0 ret -22
[  379.570232] FAT-fs (loop3): Directory bread(block 2569) failed
[  379.576286] FAT-fs (loop3): Directory bread(block 2570) failed
[  379.582318] FAT-fs (loop3): Directory bread(block 2571) failed
[  379.590922] FAT-fs (loop3): Directory bread(block 2572) failed
[  379.591180] binder: 2951:2965 ioctl 9 20000000 returned -22
[  379.600511] FAULT_INJECTION: forcing a failure.
[  379.600511] name failslab, interval 1, probability 0, space 0, times 0
[  379.602705] FAT-fs (loop3): Directory bread(block 2573) failed
[  379.602724] FAT-fs (loop3): Directory bread(block 2574) failed
[  379.602748] FAT-fs (loop3): Directory bread(block 2575) failed
[  379.613949] CPU: 0 PID: 2967 Comm: syz-executor0 Not tainted 4.18.0-rc7-next-20180801+ #29
[  379.630017] FAT-fs (loop3): Directory bread(block 2576) failed
[  379.631796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
23:11:08 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:08 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x608, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:08 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000212070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  379.631801] Call Trace:
[  379.631824]  dump_stack+0x1c9/0x2b4
[  379.643494] FAT-fs (loop3): Directory bread(block 2577) failed
[  379.646160]  ? dump_stack_print_info.cold.2+0x52/0x52
[  379.646181]  should_fail.cold.4+0xa/0x11
[  379.646200]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  379.657394] FAT-fs (loop3): Directory bread(block 2578) failed
[  379.658098]  ? trace_hardirqs_on+0x10/0x10
[  379.658114]  ? __kernel_text_address+0xd/0x40
[  379.658126]  ? unwind_get_return_address+0x61/0xa0
[  379.658144]  ? __save_stack_trace+0x8d/0xf0
23:11:08 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x30000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  379.695265] binder: tried to use weak ref as strong ref
[  379.696648]  ? save_stack+0xa9/0xd0
[  379.696660]  ? save_stack+0x43/0xd0
[  379.696680]  ? __lockdep_init_map+0x105/0x590
[  379.701631] binder: 2951:2965 Release 1 refcount change on invalid ref 0 ret -22
[  379.705917]  ? kasan_slab_alloc+0x12/0x20
[  379.705941]  ? lock_acquire+0x1e4/0x540
[  379.711508] binder: BINDER_SET_CONTEXT_MGR already set
[  379.714901]  ? fs_reclaim_acquire+0x20/0x20
[  379.714916]  ? lock_downgrade+0x8f0/0x8f0
[  379.714933]  ? do_raw_write_unlock.cold.8+0x49/0x49
[  379.718628] binder: 2951:2956 ioctl 40046207 0 returned -16
[  379.723019]  ? check_same_owner+0x340/0x340
[  379.723036]  ? rcu_note_context_switch+0x730/0x730
[  379.723052]  __should_failslab+0x124/0x180
[  379.723069]  should_failslab+0x9/0x14
[  379.780215]  kmem_cache_alloc+0x2af/0x760
[  379.784344]  ? mpol_shared_policy_init+0x235/0x670
[  379.789253]  ? lock_downgrade+0x8f0/0x8f0
[  379.793384]  __d_alloc+0xc8/0xd50
[  379.796823]  ? shrink_dcache_for_umount+0x2b0/0x2b0
[  379.801816]  ? ktime_get_coarse_real_ts64+0x243/0x3a0
[  379.806985]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  379.812507]  ? timespec64_trunc+0xea/0x180
[  379.816720]  ? inode_init_owner+0x340/0x340
[  379.821023]  ? _raw_spin_unlock+0x22/0x30
[  379.825148]  ? current_time+0x10b/0x1b0
[  379.829102]  ? __lockdep_init_map+0x105/0x590
[  379.833583]  d_alloc_pseudo+0x1d/0x30
[  379.837362]  alloc_file_pseudo+0x158/0x3f0
[  379.841579]  ? alloc_file+0x430/0x430
[  379.845371]  ? check_same_owner+0x340/0x340
[  379.849681]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  379.854677]  ? __check_object_size+0xa3/0x5d7
[  379.859152]  ? kasan_check_write+0x14/0x20
[  379.863368]  __shmem_file_setup.part.48+0x110/0x2a0
[  379.868371]  shmem_file_setup+0x65/0x90
[  379.872325]  __x64_sys_memfd_create+0x2af/0x4f0
[  379.876973]  ? memfd_fcntl+0x1e80/0x1e80
[  379.881023]  do_syscall_64+0x1b9/0x820
[  379.884890]  ? finish_task_switch+0x1d3/0x870
[  379.889365]  ? syscall_return_slowpath+0x5e0/0x5e0
[  379.894274]  ? syscall_return_slowpath+0x31d/0x5e0
[  379.899185]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  379.904189]  ? __switch_to_asm+0x34/0x70
[  379.908228]  ? __switch_to_asm+0x34/0x70
[  379.912266]  ? __switch_to_asm+0x40/0x70
[  379.916306]  ? __switch_to_asm+0x34/0x70
[  379.920356]  ? __switch_to_asm+0x40/0x70
[  379.924395]  ? __switch_to_asm+0x34/0x70
[  379.928436]  ? __switch_to_asm+0x40/0x70
[  379.932480]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  379.937315]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  379.942490] RIP: 0033:0x456a09
[  379.945680] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  379.964572] RSP: 002b:00007f67699fba88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  379.972260] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000456a09
[  379.979513] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004c17ce
[  379.986767] RBP: 00000000009300a0 R08: 0000000020000158 R09: 00000000fbad8001
[  379.994017] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000013
23:11:09 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

[  380.001269] R13: 00000000004d5650 R14: 00000000004c8f38 R15: 0000000000000002
23:11:09 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:09 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x88470000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:09 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8035000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:09 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  380.159626] binder: tried to use weak ref as strong ref
[  380.165169] binder: 2991:2995 Release 1 refcount change on invalid ref 0 ret -22
[  380.175072] binder: BINDER_SET_CONTEXT_MGR already set
[  380.180449] binder: tried to use weak ref as strong ref
[  380.180479] binder: 2991:2995 ioctl 40046207 0 returned -16
[  380.185931] binder: 2991:2996 Release 1 refcount change on invalid ref 0 ret -22
[  380.203137] FAT-fs (loop3): bogus sectors per cluster 18
[  380.208636] FAT-fs (loop3): Can't find a valid FAT filesystem
[  380.257582] FAT-fs (loop5): bogus number of reserved sectors
[  380.263482] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:10 executing program 0 (fault-call:1 fault-nth:3):
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:10 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x200000000000000}}, 0x1c)

23:11:10 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x100000000, 0x3a4f3765, 0x3, 0x1ff, 0x1f})

23:11:10 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x6000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:10 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020a070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:10 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:10 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:10 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x22020000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  380.878796] FAULT_INJECTION: forcing a failure.
[  380.878796] name failslab, interval 1, probability 0, space 0, times 0
[  380.882223] binder: tried to use weak ref as strong ref
[  380.890086] CPU: 1 PID: 3035 Comm: syz-executor0 Not tainted 4.18.0-rc7-next-20180801+ #29
[  380.890095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  380.890099] Call Trace:
[  380.890121]  dump_stack+0x1c9/0x2b4
[  380.890138]  ? dump_stack_print_info.cold.2+0x52/0x52
[  380.890162]  should_fail.cold.4+0xa/0x11
[  380.890179]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  380.890198]  ? kasan_kmalloc+0xc4/0xe0
[  380.895572] binder: 3030:3034 Release 1 refcount change on invalid ref 0 ret -22
[  380.903938]  ? kasan_slab_alloc+0x12/0x20
[  380.903955]  ? kmem_cache_alloc+0x12e/0x760
[  380.903979]  ? __d_alloc+0xc8/0xd50
[  380.914481] binder: 3030:3039 ioctl 801c581f 20000000 returned -22
[  380.915901]  ? d_alloc_pseudo+0x1d/0x30
[  380.915920]  ? alloc_file_pseudo+0x158/0x3f0
[  380.915939]  ? __shmem_file_setup.part.48+0x110/0x2a0
[  380.915957]  ? shmem_file_setup+0x65/0x90
[  380.934922] binder: tried to use weak ref as strong ref
[  380.937738]  ? trace_hardirqs_on+0x10/0x10
[  380.937751]  ? save_stack+0xa9/0xd0
[  380.937768]  ? memcg_kmem_get_cache+0x1fc/0x9d0
[  380.937786]  ? mem_cgroup_handle_over_high+0x130/0x130
[  380.945339] binder: 3030:3039 Release 1 refcount change on invalid ref 0 ret -22
[  380.949444]  ? lock_acquire+0x1e4/0x540
[  380.949458]  ? fs_reclaim_acquire+0x20/0x20
[  380.949475]  ? lock_downgrade+0x8f0/0x8f0
[  380.949496]  ? check_same_owner+0x340/0x340
[  380.954229] binder: BINDER_SET_CONTEXT_MGR already set
[  380.957401]  ? lock_downgrade+0x8f0/0x8f0
[  380.957416]  ? rcu_note_context_switch+0x730/0x730
[  380.957433]  __should_failslab+0x124/0x180
[  380.957445]  should_failslab+0x9/0x14
[  380.957461]  kmem_cache_alloc+0x2af/0x760
[  380.957824]  ? kasan_check_write+0x14/0x20
[  380.957842]  ? do_raw_spin_lock+0xc1/0x200
[  380.970544] FAT-fs (loop5): bogus number of reserved sectors
[  380.972501]  __alloc_file+0xac/0x400
[  380.972516]  ? file_free_rcu+0x90/0x90
23:11:10 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x88470000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:10 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x222, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:10 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x200000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:10 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8864000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  380.972530]  ? select_collect+0x610/0x610
[  380.972547]  ? d_instantiate+0x79/0xa0
[  380.977726] FAT-fs (loop5): Can't find a valid FAT filesystem
[  380.981844]  ? lock_downgrade+0x8f0/0x8f0
[  380.981857]  ? kasan_check_read+0x11/0x20
[  380.981874]  ? do_raw_spin_unlock+0xa7/0x2f0
[  380.987363] FAT-fs (loop3): bogus sectors per cluster 10
[  380.991421]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  380.991440]  alloc_empty_file+0x72/0x170
[  380.991456]  alloc_file+0x5c/0x430
[  380.991473]  alloc_file_pseudo+0x261/0x3f0
[  380.991491]  ? alloc_file+0x430/0x430
23:11:10 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8906000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:10 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:10 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

[  380.995103] FAT-fs (loop3): Can't find a valid FAT filesystem
[  380.999742]  ? check_same_owner+0x340/0x340
[  380.999756]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  380.999772]  ? __check_object_size+0xa3/0x5d7
[  381.007925] binder: 3030:3034 ioctl 40046207 0 returned -16
[  381.012534]  ? kasan_check_write+0x14/0x20
[  381.012554]  __shmem_file_setup.part.48+0x110/0x2a0
[  381.012571]  shmem_file_setup+0x65/0x90
[  381.012587]  __x64_sys_memfd_create+0x2af/0x4f0
[  381.172711]  ? memfd_fcntl+0x1e80/0x1e80
[  381.176781]  do_syscall_64+0x1b9/0x820
[  381.180670]  ? finish_task_switch+0x1d3/0x870
[  381.185171]  ? syscall_return_slowpath+0x5e0/0x5e0
[  381.190107]  ? syscall_return_slowpath+0x31d/0x5e0
[  381.195043]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  381.200060]  ? __switch_to_asm+0x34/0x70
[  381.204124]  ? __switch_to_asm+0x34/0x70
[  381.208187]  ? __switch_to_asm+0x40/0x70
[  381.212250]  ? __switch_to_asm+0x34/0x70
[  381.216309]  ? __switch_to_asm+0x40/0x70
[  381.220370]  ? __switch_to_asm+0x34/0x70
[  381.224427]  ? __switch_to_asm+0x40/0x70
23:11:10 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x3580, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  381.228495]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  381.233340]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  381.238529] RIP: 0033:0x456a09
[  381.241726] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  381.260625] RSP: 002b:00007f67699fba88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  381.268337] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000456a09
[  381.275605] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004c17ce
[  381.282870] RBP: 00000000009300a0 R08: 0000000020000158 R09: 00000000fbad8001
[  381.290140] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000013
[  381.297406] R13: 00000000004d5650 R14: 00000000004c8f38 R15: 0000000000000003
23:11:10 executing program 0 (fault-call:1 fault-nth:4):
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  381.628339] FAULT_INJECTION: forcing a failure.
[  381.628339] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  381.640261] CPU: 0 PID: 3079 Comm: syz-executor0 Not tainted 4.18.0-rc7-next-20180801+ #29
[  381.648651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  381.657986] Call Trace:
[  381.660564]  dump_stack+0x1c9/0x2b4
[  381.664179]  ? dump_stack_print_info.cold.2+0x52/0x52
[  381.669368]  should_fail.cold.4+0xa/0x11
[  381.673415]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  381.678509]  ? lock_acquire+0x1e4/0x540
[  381.682470]  ? find_get_entry+0xa6d/0x1120
[  381.686694]  ? lock_downgrade+0x8f0/0x8f0
[  381.690832]  ? trace_hardirqs_on+0x10/0x10
[  381.695057]  ? lock_release+0xa30/0xa30
[  381.699026]  ? d_alloc_parallel+0x15a/0x1eb0
[  381.703431]  ? __lookup_slow+0x1e6/0x540
[  381.707470]  ? lookup_slow+0x57/0x80
[  381.711170]  ? walk_component+0x94a/0x2630
[  381.715405]  ? link_path_walk.part.42+0x6e0/0x1540
[  381.720334]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  381.725863]  ? lock_acquire+0x1e4/0x540
[  381.729829]  ? fs_reclaim_acquire+0x20/0x20
[  381.734148]  ? lock_downgrade+0x8f0/0x8f0
[  381.738291]  ? check_same_owner+0x340/0x340
[  381.742597]  ? rcu_note_context_switch+0x730/0x730
[  381.747515]  __alloc_pages_nodemask+0x36e/0xdb0
[  381.752166]  ? lock_release+0xa30/0xa30
[  381.756124]  ? __alloc_pages_slowpath+0x2d30/0x2d30
[  381.761132]  ? rcu_is_watching+0x8c/0x150
[  381.765264]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  381.769935]  ? trace_hardirqs_on+0x10/0x10
[  381.774160]  ? is_bpf_text_address+0xd7/0x170
[  381.778643]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  381.783641]  ? percpu_counter_add_batch+0xf2/0x150
[  381.788554]  ? mpol_shared_policy_lookup+0xf7/0x150
[  381.793552]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  381.799071]  alloc_pages_vma+0xdd/0x540
[  381.803030]  shmem_alloc_page+0xa8/0x190
[  381.807071]  ? shmem_swapin+0x230/0x230
[  381.811026]  ? do_sys_open+0x584/0x720
[  381.814906]  shmem_alloc_and_acct_page+0x1f1/0x820
[  381.819824]  ? shmem_getattr+0x2c0/0x2c0
[  381.823866]  ? lock_release+0xa30/0xa30
[  381.827823]  shmem_getpage_gfp+0x6ea/0x3ec0
[  381.832130]  ? shmem_writepage+0x13a0/0x13a0
[  381.836519]  ? trace_hardirqs_on+0xd/0x10
[  381.840645]  ? __wake_up_common_lock+0x1d0/0x330
[  381.845379]  ? __wake_up_common+0x7b0/0x7b0
[  381.849680]  ? trace_hardirqs_on+0x10/0x10
[  381.853898]  ? lockdep_init_map+0x9/0x10
[  381.857947]  ? trace_hardirqs_on+0x10/0x10
[  381.862170]  ? trace_hardirqs_on+0x10/0x10
[  381.866385]  ? trace_hardirqs_on+0x10/0x10
[  381.870609]  ? trace_hardirqs_on+0x10/0x10
[  381.874823]  ? trace_hardirqs_on+0x10/0x10
[  381.879038]  ? trace_hardirqs_on+0x10/0x10
[  381.883251]  ? trace_hardirqs_on+0x10/0x10
[  381.887467]  ? trace_hardirqs_on+0x10/0x10
[  381.891691]  ? d_instantiate_anon+0x30/0x30
[  381.895994]  ? kasan_check_read+0x11/0x20
[  381.900122]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  381.905117]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  381.910112]  ? bpf_prog_kallsyms_find+0xde/0x4c0
[  381.914850]  ? lock_acquire+0x1e4/0x540
[  381.918801]  ? is_bpf_text_address+0xae/0x170
[  381.923275]  ? lock_downgrade+0x8f0/0x8f0
[  381.927403]  ? lock_release+0xa30/0xa30
[  381.931375]  ? trace_hardirqs_on+0x10/0x10
[  381.935589]  ? rcu_is_watching+0x8c/0x150
[  381.939715]  ? trace_hardirqs_on+0x10/0x10
[  381.943931]  ? lock_acquire+0x1e4/0x540
[  381.947886]  ? simple_xattr_get+0x106/0x180
[  381.952188]  ? current_time+0x72/0x1b0
[  381.956058]  ? lock_downgrade+0x8f0/0x8f0
[  381.960182]  ? kasan_check_read+0x11/0x20
[  381.964311]  ? lock_release+0xa30/0xa30
[  381.968262]  ? kasan_check_write+0x14/0x20
[  381.972480]  ? do_raw_spin_lock+0xc1/0x200
[  381.976707]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  381.982223]  ? iov_iter_fault_in_readable+0x23d/0x460
[  381.987400]  ? copy_page_from_iter+0x890/0x890
[  381.991971]  ? __sanitizer_cov_trace_const_cmp8+0xb/0x20
[  381.997422]  ? ktime_get_coarse_real_ts64+0x243/0x3a0
[  382.002612]  shmem_write_begin+0x10a/0x1e0
[  382.006830]  generic_perform_write+0x3ae/0x6c0
[  382.011398]  ? add_page_wait_queue+0x2c0/0x2c0
[  382.015959]  ? file_update_time+0xe4/0x640
[  382.020180]  ? current_time+0x1b0/0x1b0
[  382.024147]  ? down_write+0x8f/0x130
[  382.027852]  __generic_file_write_iter+0x26e/0x630
[  382.032773]  generic_file_write_iter+0x438/0x870
[  382.037516]  ? __generic_file_write_iter+0x630/0x630
[  382.042608]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  382.048124]  ? iov_iter_init+0xc9/0x1f0
[  382.052079]  __vfs_write+0x6af/0x9d0
[  382.055772]  ? kernel_read+0x120/0x120
[  382.059641]  ? lock_release+0xa30/0xa30
[  382.063594]  ? check_same_owner+0x340/0x340
[  382.067896]  ? __fget_light+0x2f7/0x440
[  382.071851]  ? fget_raw+0x20/0x20
[  382.075293]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  382.080814]  ? __sb_start_write+0x17f/0x300
[  382.085133]  vfs_write+0x1fc/0x560
[  382.088659]  ksys_pwrite64+0x181/0x1b0
[  382.092527]  ? __ia32_sys_pread64+0xf0/0xf0
[  382.096831]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  382.102350]  ? fput+0x130/0x1a0
[  382.105609]  ? do_sys_ftruncate+0x44e/0x560
[  382.109920]  __x64_sys_pwrite64+0x97/0xf0
[  382.114061]  do_syscall_64+0x1b9/0x820
[  382.117936]  ? finish_task_switch+0x1d3/0x870
[  382.122415]  ? syscall_return_slowpath+0x5e0/0x5e0
[  382.127325]  ? syscall_return_slowpath+0x31d/0x5e0
[  382.132234]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  382.137230]  ? __switch_to_asm+0x34/0x70
[  382.141271]  ? __switch_to_asm+0x34/0x70
[  382.145309]  ? __switch_to_asm+0x40/0x70
[  382.149345]  ? __switch_to_asm+0x34/0x70
[  382.153386]  ? __switch_to_asm+0x40/0x70
[  382.157436]  ? __switch_to_asm+0x34/0x70
[  382.161479]  ? __switch_to_asm+0x40/0x70
[  382.165536]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  382.170369]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  382.175536] RIP: 0033:0x4107a7
[  382.178710] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 51 17 00 00 c3 48 83 ec 08 e8 27 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 6d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  382.197589] RSP: 002b:00007f67699fba80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  382.205276] RAX: ffffffffffffffda RBX: 0000000020000150 RCX: 00000000004107a7
[  382.212523] RDX: 0000000000000017 RSI: 0000000020010000 RDI: 0000000000000014
[  382.219769] RBP: 0000000000000000 R08: 0000000020000158 R09: 00000000fbad8001
23:11:11 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x805}}, 0x1c)

23:11:11 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8847000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:11 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:11 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
socket$pptp(0x18, 0x1, 0x2)

23:11:11 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8100000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:11 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73c0", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:11 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000209070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  382.227017] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000014
[  382.234264] R13: 0000000000000001 R14: 00000000004c8f38 R15: 0000000000000004
23:11:11 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:11 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x600, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:11 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xb00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  382.281713] binder: tried to use weak ref as strong ref
[  382.287163] binder: 3087:3096 Release 1 refcount change on invalid ref 0 ret -22
[  382.311825] FAT-fs (loop3): bogus sectors per cluster 9
[  382.317257] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:11 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000203070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:11 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  382.328696] binder: tried to use weak ref as strong ref
[  382.334273] binder: 3087:3102 Release 1 refcount change on invalid ref 0 ret -22
[  382.353828] binder: BINDER_SET_CONTEXT_MGR already set
[  382.370261] binder: 3087:3096 ioctl 40046207 0 returned -16
23:11:11 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x3000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:11 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:11 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x1000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  382.440889] FAT-fs (loop3): bogus sectors per cluster 3
[  382.446346] FAT-fs (loop3): Can't find a valid FAT filesystem
[  382.501133] FAT-fs (loop5): bogus number of reserved sectors
[  382.507014] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:11 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  382.708111] FAT-fs (loop0): Directory bread(block 2569) failed
[  382.714202] FAT-fs (loop0): Directory bread(block 2570) failed
[  382.720227] FAT-fs (loop0): Directory bread(block 2571) failed
[  382.728866] FAT-fs (loop0): Directory bread(block 2572) failed
[  382.738892] FAT-fs (loop0): Directory bread(block 2573) failed
[  382.748921] FAT-fs (loop0): Directory bread(block 2574) failed
[  382.758943] FAT-fs (loop0): Directory bread(block 2575) failed
[  382.769035] FAT-fs (loop0): Directory bread(block 2576) failed
[  382.778997] FAT-fs (loop0): Directory bread(block 2577) failed
[  382.789106] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:12 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x700}}, 0x1c)

23:11:12 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x218840, 0x0)
ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x2000000000000000, 0x5000, 0x7, 0x4, 0x5})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:12 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000214070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:12 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xd, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:12 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x80350000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:12 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7304", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:12 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mcdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:12 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x689, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:12 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xd00000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  383.148550] FAT-fs (loop3): bogus sectors per cluster 20
[  383.154095] FAT-fs (loop3): Can't find a valid FAT filesystem
[  383.163969] binder: tried to use weak ref as strong ref
[  383.169429] binder: 3163:3174 Release 1 refcount change on invalid ref 0 ret -22
[  383.183406] binder: BINDER_SET_CONTEXT_MGR already set
[  383.189355] binder: 3163:3174 ioctl 40046207 0 returned -16
23:11:12 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='{vmnet0vmnet1\x00'}, 0x10)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x16, [], 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000200)=""/22}, &(0x7f00000002c0)=0x78)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'vboxnet1cgroup[selinux@)@md5sum[\x00'}, &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x2)

23:11:12 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000263070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  383.198043] binder: tried to use weak ref as strong ref
[  383.203516] binder: 3163:3182 Release 1 refcount change on invalid ref 0 ret -22
23:11:12 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='m*dos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:12 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x1400, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  383.294402] binder: tried to use weak ref as strong ref
[  383.299880] binder: 3192:3194 Release 1 refcount change on invalid ref 0 ret -22
[  383.308803] binder: BINDER_SET_CONTEXT_MGR already set
[  383.314429] binder: tried to use weak ref as strong ref
[  383.319810] binder: 3192:3194 ioctl 40046207 0 returned -16
[  383.325689] binder: 3192:3198 Release 1 refcount change on invalid ref 0 ret -22
[  383.334036] FAT-fs (loop3): bogus sectors per cluster 99
23:11:12 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f00006dc000)}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:12 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:12 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  383.339564] FAT-fs (loop3): Can't find a valid FAT filesystem
[  383.442122] FAT-fs (loop5): bogus number of reserved sectors
[  383.448026] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:13 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfec0}}, 0x1c)

23:11:13 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000207070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:13 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
getpid()
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:13 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8864000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:13 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x800e, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:13 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mxdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:13 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7305", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:13 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x88a8ffff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:13 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x4788, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  383.991946] binder: tried to use weak ref as strong ref
[  383.997543] binder: 3236:3239 Release 1 refcount change on invalid ref 0 ret -22
[  384.007661] binder: BINDER_SET_CONTEXT_MGR already set
[  384.015227] binder: 3236:3239 ioctl 40046207 0 returned -16
[  384.026149] FAT-fs (loop3): bogus sectors per cluster 7
[  384.031646] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:13 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000242070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:13 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:13 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x80000)
openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x1, 0x8, 0x4f76, 0x76, 0x4, 0x1000}, 0x2ffb201a}, 0xa)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000006630440000000002347178523a76c62593a1b53e1833a7e949656bae14267d47a9c063eb8329ca297b4329aa8b53101321ae9147eb9260dca3620ff2d67597a4cda8131cb0709b8ecbd5e0ba0635fca4b002900632d20630c5ab9ec8b2fad70bb71a5d4343f19f7078c9b31cd0493eb95f2c07bc45ec4d14f280283c9766ff422aa0b7dfe"], 0x0, 0x0, &(0x7f0000000280)})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8)

23:11:13 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='m.dos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  384.151824] FAT-fs (loop3): bogus sectors per cluster 66
[  384.157363] FAT-fs (loop3): Can't find a valid FAT filesystem
[  384.198010] binder: tried to use weak ref as strong ref
[  384.203486] binder: 3273:3274 Release 1 refcount change on invalid ref 0 ret -22
[  384.219406] binder: BINDER_SET_CONTEXT_MGR already set
[  384.228817] FAT-fs (loop5): bogus number of reserved sectors
[  384.234709] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:13 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x800000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:13 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x40000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:13 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x0, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  384.243344] binder: 3273:3274 ioctl 40046207 0 returned -16
[  384.249376] binder: tried to use weak ref as strong ref
[  384.254957] binder: 3273:3287 Release 1 refcount change on invalid ref 0 ret -22
23:11:14 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x6000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:14 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x9}}, 0x1c)

23:11:14 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x43050000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:14 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000205070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:14 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='m-dos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:14 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7302", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:14 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630000000100000663994000000000"], 0x0, 0x0, &(0x7f0000000280)})

23:11:14 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x300, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:14 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x3000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  384.908664] binder: 3315:3316 unknown command 25348
[  384.917308] binder: 3315:3316 ioctl c0306201 200003c0 returned -22
[  384.941150] binder: BINDER_SET_CONTEXT_MGR already set
[  384.954566] binder: 3315:3330 unknown command 25348
[  384.966048] FAT-fs (loop3): bogus sectors per cluster 5
[  384.970287] binder: 3315:3330 ioctl c0306201 200003c0 returned -22
[  384.971500] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:14 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='m%dos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:14 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000206070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:14 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73fd", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:14 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xe80, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:14 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xf0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:14 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x20)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x2, 0x3, 0x3}}, 0x28)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e20, @multicast2}})

[  385.025614] binder: 3315:3316 ioctl 40046207 0 returned -16
23:11:14 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:14 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x30, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  385.156422] binder: tried to use weak ref as strong ref
[  385.161953] binder: 3357:3361 Release 1 refcount change on invalid ref 0 ret -22
[  385.199804] binder: BINDER_SET_CONTEXT_MGR already set
[  385.206094] binder: 3357:3361 ioctl 40046207 0 returned -16
[  385.215099] binder: tried to use weak ref as strong ref
[  385.220553] binder: 3357:3370 Release 1 refcount change on invalid ref 0 ret -22
23:11:14 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='m\ndos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:14 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xc0fe}}, 0x1c)

23:11:14 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x300, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:14 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204100a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:14 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0)
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000700000663044000000000"], 0x0, 0x0, &(0x7f0000000280)})
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=<r2=>0x0)
getpgid(r2)

23:11:14 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73bf", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:14 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xb00, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:15 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x3, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:15 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xffffdd86, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  385.791338] FAT-fs (loop3): Directory bread(block 2578) failed
[  385.797409] FAT-fs (loop3): Directory bread(block 2579) failed
[  385.803446] FAT-fs (loop3): Directory bread(block 2580) failed
[  385.812053] FAT-fs (loop3): Directory bread(block 2581) failed
[  385.818763] binder: 3399:3409 IncRefs 0 refcount change on invalid ref 1792 ret -22
[  385.822214] FAT-fs (loop3): Directory bread(block 2582) failed
[  385.826635] binder: 3399:3409 Release 1 refcount change on invalid ref 0 ret -22
23:11:15 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='m#dos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:15 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740002040f0a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:15 executing program 7:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40000, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xb6e)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x143880)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000000c0)=0x44)

[  385.839544] FAT-fs (loop3): Directory bread(block 2583) failed
[  385.849668] FAT-fs (loop3): Directory bread(block 2584) failed
[  385.856761] binder: 3399:3422 IncRefs 0 refcount change on invalid ref 1792 ret -22
[  385.864735] binder: 3399:3422 Release 1 refcount change on invalid ref 0 ret -22
[  385.872313] FAT-fs (loop3): Directory bread(block 2585) failed
[  385.878441] FAT-fs (loop3): Directory bread(block 2586) failed
[  385.884479] FAT-fs (loop3): Directory bread(block 2587) failed
23:11:15 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:15 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x800000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:15 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:15 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xffffa888, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:15 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x101000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000005c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000440)}}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0463043d3d00af7ccce04020769ccc11643513cf39c880fbe451019dde8cb215c821aee4e6af29841268666a128cd81ac447fabef769a70d6b51953d3c5b2a283c779bdff996362edbaa2e0be28fcc1d7e788c2834fb3d8c5a21f3ec909586ba68d416e0360dc846359a8fb07227279dd7b87227b066d0d9ea7c2adf9f38a105"], 0x0, 0x0, &(0x7f0000000280)})
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000240)=""/211, 0xd3)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x400, 0x0)
r3 = accept4$nfc_llcp(r2, &(0x7f0000000340), &(0x7f0000000700)=0x60, 0x80000)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0)
ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000140)=""/230)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000600)=<r5=>0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000680)={0x0, r5})

[  385.997854] binder: BINDER_SET_CONTEXT_MGR already set
[  386.004952] binder: 3439:3441 ioctl 40046207 0 returned -16
[  386.039044] FAT-fs (loop3): Directory bread(block 2577) failed
[  386.045159] FAT-fs (loop3): Directory bread(block 2578) failed
[  386.051177] FAT-fs (loop3): Directory bread(block 2579) failed
[  386.059527] FAT-fs (loop3): Directory bread(block 2580) failed
[  386.069568] FAT-fs (loop3): Directory bread(block 2581) failed
[  386.079570] FAT-fs (loop3): Directory bread(block 2582) failed
[  386.089656] FAT-fs (loop3): Directory bread(block 2583) failed
[  386.099747] FAT-fs (loop3): Directory bread(block 2584) failed
[  386.109708] FAT-fs (loop3): Directory bread(block 2585) failed
[  386.119932] FAT-fs (loop3): Directory bread(block 2586) failed
[  386.156067] binder: 3462:3465 unknown command 1023697668
[  386.163926] binder: 3462:3465 ioctl c0306201 200003c0 returned -22
[  386.179825] binder: BINDER_SET_CONTEXT_MGR already set
[  386.186079] binder: 3462:3465 ioctl 40046207 0 returned -16
[  386.187003] binder: 3462:3473 unknown command 1023697668
[  386.197811] binder: 3462:3473 ioctl c0306201 200003c0 returned -22
[  386.222602] FAT-fs (loop5): bogus number of reserved sectors
[  386.228478] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:15 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xae7e31bb}}, 0x1c)

23:11:15 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mpdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:15 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740002040a0a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:15 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x1c00000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:15 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:15 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:15 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000400)={{0xcc, 0x4427b479, 0x7, 0x307, 0xc7, 0x400, 0x301, 0x1}, "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", [[], [], [], [], [], [], [], []]}, 0x1820)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0463044000000000bb0000000000e5ff"], 0x0, 0x0, &(0x7f0000000280)})
r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x400, 0x7fc)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)="637000010100000000", 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0)
ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0)

23:11:15 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:15 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x7000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:15 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:15 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x88a8ffff00000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  386.668393] FAT-fs (loop3): Directory bread(block 2572) failed
[  386.675673] binder: 3496:3504 unknown command 187
[  386.679190] FAT-fs (loop3): Directory bread(block 2573) failed
[  386.686588] FAT-fs (loop3): Directory bread(block 2574) failed
[  386.692595] FAT-fs (loop3): Directory bread(block 2575) failed
[  386.697876] binder: 3496:3504 ioctl c0306201 200003c0 returned -22
[  386.700389] FAT-fs (loop5): bogus number of reserved sectors
[  386.705042] FAT-fs (loop3): Directory bread(block 2576) failed
[  386.710812] FAT-fs (loop5): Can't find a valid FAT filesystem
[  386.722762] FAT-fs (loop3): Directory bread(block 2577) failed
[  386.738297] binder: BINDER_SET_CONTEXT_MGR already set
[  386.751573] FAT-fs (loop3): Directory bread(block 2578) failed
[  386.756598] binder: 3496:3511 ioctl 40046207 0 returned -16
23:11:16 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:16 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000000000600000000000000"], 0x0, 0x0, &(0x7f0000000280)})
socket$inet6(0xa, 0x40000000080808, 0x2)

23:11:16 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mXdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  386.757737] FAT-fs (loop3): Directory bread(block 2579) failed
[  386.763845] binder: 3496:3504 unknown command 187
[  386.771448] FAT-fs (loop3): Directory bread(block 2580) failed
[  386.776685] binder: 3496:3504 ioctl c0306201 200003c0 returned -22
[  386.781318] FAT-fs (loop3): Directory bread(block 2581) failed
23:11:16 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204420a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:16 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x60000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  386.886648] binder: 3528:3529 unknown command 6
[  386.891522] binder: 3528:3529 ioctl c0306201 200003c0 returned -22
[  386.919780] binder: BINDER_SET_CONTEXT_MGR already set
[  386.925190] binder: 3528:3529 ioctl 40046207 0 returned -16
[  386.944308] binder: 3528:3535 unknown command 6
[  386.962042] binder: 3528:3535 ioctl c0306201 200003c0 returned -22
[  387.006066] FAT-fs (loop5): bogus number of reserved sectors
[  387.011925] FAT-fs (loop5): Can't find a valid FAT filesystem
[  387.015854] FAT-fs (loop3): Directory bread(block 2628) failed
[  387.023952] FAT-fs (loop3): Directory bread(block 2629) failed
[  387.030097] FAT-fs (loop3): Directory bread(block 2630) failed
[  387.039576] FAT-fs (loop3): Directory bread(block 2631) failed
[  387.049940] FAT-fs (loop3): Directory bread(block 2632) failed
[  387.059948] FAT-fs (loop3): Directory bread(block 2633) failed
[  387.070056] FAT-fs (loop3): Directory bread(block 2634) failed
[  387.080150] FAT-fs (loop3): Directory bread(block 2635) failed
[  387.090162] FAT-fs (loop3): Directory bread(block 2636) failed
[  387.100199] FAT-fs (loop3): Directory bread(block 2637) failed
23:11:16 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfe800000}}, 0x1c)

23:11:16 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:16 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x7000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:16 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mddos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:16 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8060000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:16 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="046304eae3a520829fcd8d4000000000"], 0x0, 0x0, &(0x7f0000000280)})
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xff, 0x8482)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/187)

23:11:16 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:16 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204740a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  387.487408] binder: 3566:3570 unknown command -368811260
[  387.512081] binder: 3566:3570 ioctl c0306201 200003c0 returned -22
[  387.522807] FAT-fs (loop3): Directory bread(block 2678) failed
[  387.528917] FAT-fs (loop3): Directory bread(block 2679) failed
23:11:16 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xa000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:16 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  387.528993] FAT-fs (loop3): Directory bread(block 2680) failed
[  387.538740] binder: BINDER_SET_CONTEXT_MGR already set
[  387.543190] FAT-fs (loop3): Directory bread(block 2681) failed
[  387.546355] binder: 3566:3586 unknown command -368811260
[  387.553289] FAT-fs (loop3): Directory bread(block 2682) failed
[  387.565593] FAT-fs (loop3): Directory bread(block 2683) failed
[  387.568998] binder: 3566:3570 ioctl 40046207 0 returned -16
[  387.575958] FAT-fs (loop3): Directory bread(block 2684) failed
23:11:16 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x1c00, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:16 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getcwd(&(0x7f0000000000)=""/100, 0x64)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:16 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='m0dos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  387.578284] binder: 3566:3586 ioctl c0306201 200003c0 returned -22
[  387.586712] FAT-fs (loop3): Directory bread(block 2685) failed
[  387.595727] FAT-fs (loop3): Directory bread(block 2686) failed
[  387.603749] FAT-fs (loop3): Directory bread(block 2687) failed
23:11:16 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204030a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:16 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xe02, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  387.710066] binder: tried to use weak ref as strong ref
[  387.715517] binder: 3606:3612 Release 1 refcount change on invalid ref 0 ret -22
23:11:16 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  387.754977] FAT-fs (loop3): Directory bread(block 2565) failed
[  387.761053] FAT-fs (loop3): Directory bread(block 2566) failed
[  387.767077] FAT-fs (loop3): Directory bread(block 2567) failed
[  387.775592] FAT-fs (loop3): Directory bread(block 2568) failed
[  387.785615] FAT-fs (loop3): Directory bread(block 2569) failed
[  387.796043] FAT-fs (loop3): Directory bread(block 2570) failed
[  387.803836] binder: BINDER_SET_CONTEXT_MGR already set
[  387.805894] FAT-fs (loop3): Directory bread(block 2571) failed
[  387.816411] FAT-fs (loop3): Directory bread(block 2572) failed
[  387.819032] binder: 3606:3627 ioctl 40046207 0 returned -16
[  387.828682] binder: tried to use weak ref as strong ref
[  387.834089] binder: 3606:3612 Release 1 refcount change on invalid ref 0 ret -22
[  387.841695] FAT-fs (loop3): Directory bread(block 2573) failed
[  387.847860] FAT-fs (loop3): Directory bread(block 2574) failed
[  387.929026] FAT-fs (loop5): bogus number of reserved sectors
[  387.934906] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:17 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x300}}, 0x1c)

23:11:17 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:17 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xe80, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:17 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:17 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mudos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:17 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x48800, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @broadcast}, &(0x7f00000000c0)=0xc)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000140))
ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x6c6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x208080, 0x0)

23:11:17 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204140a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:17 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7383", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:17 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  388.333979] binder: tried to use weak ref as strong ref
[  388.339460] binder: 3654:3660 Release 1 refcount change on invalid ref 0 ret -22
[  388.353893] FAT-fs (loop3): Directory bread(block 2582) failed
[  388.359975] FAT-fs (loop3): Directory bread(block 2583) failed
[  388.366059] FAT-fs (loop3): Directory bread(block 2584) failed
[  388.374286] FAT-fs (loop3): Directory bread(block 2585) failed
23:11:17 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x6488, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  388.384774] FAT-fs (loop3): Directory bread(block 2586) failed
[  388.394743] FAT-fs (loop3): Directory bread(block 2587) failed
[  388.404904] FAT-fs (loop3): Directory bread(block 2588) failed
[  388.415564] FAT-fs (loop3): Directory bread(block 2589) failed
[  388.425449] FAT-fs (loop3): Directory bread(block 2590) failed
23:11:17 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='midos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:17 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xe02000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:17 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407030200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:17 executing program 7:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040))
sendto(r1, &(0x7f0000000400)="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", 0x1000, 0x4, &(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80)
prctl$setfpexc(0xc, 0x10000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000000000663044400000000"], 0x0, 0x0, &(0x7f0000000280)})

[  388.433457] binder: BINDER_SET_CONTEXT_MGR already set
[  388.435547] FAT-fs (loop3): Directory bread(block 2591) failed
[  388.440905] binder: 3654:3660 ioctl 40046207 0 returned -16
[  388.445756] binder: tried to use weak ref as strong ref
[  388.455936] binder: 3654:3674 Release 1 refcount change on invalid ref 0 ret -22
23:11:17 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:17 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x2000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  388.565714] binder: 3689:3692 unknown command 1141138182
[  388.595081] binder: 3689:3692 ioctl c0306201 200003c0 returned -22
[  388.605261] binder: BINDER_SET_CONTEXT_MGR already set
[  388.607325] FAT-fs (loop3): Directory bread(block 777) failed
[  388.610740] binder: 3689:3692 ioctl 40046207 0 returned -16
[  388.621632] FAT-fs (loop5): bogus number of reserved sectors
[  388.628144] FAT-fs (loop5): Can't find a valid FAT filesystem
[  388.631114] binder: 3689:3708 unknown command 1141138182
[  388.634087] FAT-fs (loop3): Directory bread(block 778) failed
[  388.641749] binder: 3689:3708 ioctl c0306201 200003c0 returned -22
[  388.649419] FAT-fs (loop3): Directory bread(block 779) failed
[  388.657731] FAT-fs (loop3): Directory bread(block 780) failed
[  388.673224] FAT-fs (loop3): Directory bread(block 781) failed
[  388.679460] FAT-fs (loop3): Directory bread(block 782) failed
[  388.685398] FAT-fs (loop3): Directory bread(block 783) failed
[  388.693662] FAT-fs (loop3): Directory bread(block 784) failed
[  388.703552] FAT-fs (loop3): Directory bread(block 785) failed
[  388.713547] FAT-fs (loop3): Directory bread(block 786) failed
23:11:18 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ee620463044000000000000000000000"]})
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x5c, @rand_addr=0x34b0, 0x4e20, 0x3, 'fo\x00', 0x20, 0x7, 0x3}, 0x2c)

23:11:18 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x800e, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:18 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x4305000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:18 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:18 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:18 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mldos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:18 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407090200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:18 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x2000}}, 0x1c)

23:11:18 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x4000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  389.253294] FAT-fs (loop3): Directory bread(block 2313) failed
[  389.259486] FAT-fs (loop3): Directory bread(block 2314) failed
[  389.265611] FAT-fs (loop3): Directory bread(block 2315) failed
[  389.275631] FAT-fs (loop3): Directory bread(block 2316) failed
[  389.285646] FAT-fs (loop3): Directory bread(block 2317) failed
[  389.295671] FAT-fs (loop3): Directory bread(block 2318) failed
23:11:18 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='modos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  389.305762] FAT-fs (loop3): Directory bread(block 2319) failed
[  389.315923] FAT-fs (loop3): Directory bread(block 2320) failed
[  389.325880] FAT-fs (loop3): Directory bread(block 2321) failed
[  389.336109] FAT-fs (loop3): Directory bread(block 2322) failed
[  389.345628] binder: 3728:3748 unknown command 1661231854
23:11:18 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:18 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x1400000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:18 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x4305, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  389.352159] binder: 3728:3748 ioctl c0306201 200003c0 returned -22
[  389.368925] IPVS: set_ctl: invalid protocol: 92 0.0.52.176:20000
[  389.380384] FAT-fs (loop5): bogus number of reserved sectors
[  389.386244] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:18 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070f0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:18 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x200000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:18 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  389.439583] binder: BINDER_SET_CONTEXT_MGR already set
[  389.461300] binder: 3728:3766 unknown command 1661231854
[  389.470761] IPVS: set_ctl: invalid protocol: 92 0.0.52.176:20000
[  389.485919] binder: 3728:3748 ioctl 40046207 0 returned -16
23:11:18 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044000000000066304400000000015448fc58d32e86acae36f19ab399d549606fbdf19ef26ca0b8797616edbaaaa8bc7edaa328575a6aed9a0e60714ba7adca776ef499ecaaa46bf7b00caf71a692fffad9adbbada05f740a38bb937a52dabb4"], 0x0, 0x0, &(0x7f0000000280)})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x7, 0x7})

[  389.517039] binder: 3728:3766 ioctl c0306201 200003c0 returned -22
[  389.584790] FAT-fs (loop3): Directory bread(block 3849) failed
[  389.590863] FAT-fs (loop3): Directory bread(block 3850) failed
[  389.596897] FAT-fs (loop3): Directory bread(block 3851) failed
[  389.605268] FAT-fs (loop3): Directory bread(block 3852) failed
[  389.610184] binder: tried to use weak ref as strong ref
[  389.615181] FAT-fs (loop3): Directory bread(block 3853) failed
[  389.616716] binder: 3791:3792 Release 1 refcount change on invalid ref 0 ret -22
[  389.625468] FAT-fs (loop3): Directory bread(block 3854) failed
[  389.631524] binder: BINDER_SET_CONTEXT_MGR already set
[  389.641578] FAT-fs (loop3): Directory bread(block 3855) failed
[  389.645511] FAT-fs (loop5): bogus number of reserved sectors
[  389.647651] FAT-fs (loop3): Directory bread(block 3856) failed
[  389.653468] FAT-fs (loop5): Can't find a valid FAT filesystem
[  389.665792] FAT-fs (loop3): Directory bread(block 3857) failed
[  389.666015] binder: 3791:3795 IncRefs 0 refcount change on invalid ref 0 ret -22
[  389.672782] binder: 3791:3792 ioctl 40046207 0 returned -16
[  389.679475] binder: 3791:3795 Release 1 refcount change on invalid ref 0 ret -22
[  389.685249] FAT-fs (loop3): Directory bread(block 3858) failed
23:11:19 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xff00}}, 0x1c)

23:11:19 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:19 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8847, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:19 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='m+dos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:19 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x700000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:19 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407020200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:19 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0)

23:11:19 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:19 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x3580, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  390.174154] binder: tried to use weak ref as strong ref
[  390.179645] binder: 3809:3810 Release 1 refcount change on invalid ref 0 ret -22
[  390.199158] FAT-fs (loop3): Directory bread(block 521) failed
[  390.205221] FAT-fs (loop3): Directory bread(block 522) failed
[  390.205907] binder: BINDER_SET_CONTEXT_MGR already set
[  390.211190] FAT-fs (loop3): Directory bread(block 523) failed
23:11:19 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xf0ffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  390.216713] binder: tried to use weak ref as strong ref
[  390.227754] binder: 3809:3831 Release 1 refcount change on invalid ref 0 ret -22
[  390.228587] FAT-fs (loop3): Directory bread(block 524) failed
[  390.239733] binder: 3809:3810 ioctl 40046207 0 returned -16
[  390.249699] FAT-fs (loop3): Directory bread(block 525) failed
[  390.259580] FAT-fs (loop3): Directory bread(block 526) failed
23:11:19 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x806, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:19 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407040200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:19 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x89060000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:19 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
signalfd4(r0, &(0x7f0000000000)={0x3}, 0x8, 0x367e5c564c4625b3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:19 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms/os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  390.269600] FAT-fs (loop3): Directory bread(block 527) failed
[  390.279455] FAT-fs (loop3): Directory bread(block 528) failed
[  390.289323] FAT-fs (loop3): Directory bread(block 529) failed
[  390.299683] FAT-fs (loop3): Directory bread(block 530) failed
23:11:19 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  390.422534] binder: tried to use weak ref as strong ref
[  390.428008] binder: 3856:3864 Release 1 refcount change on invalid ref 0 ret -22
[  390.456616] binder: BINDER_SET_CONTEXT_MGR already set
[  390.462977] binder: 3856:3864 ioctl 40046207 0 returned -16
[  390.463613] FAT-fs (loop3): Directory bread(block 1033) failed
[  390.474749] FAT-fs (loop3): Directory bread(block 1034) failed
[  390.482392] FAT-fs (loop3): Directory bread(block 1035) failed
[  390.492418] FAT-fs (loop3): Directory bread(block 1036) failed
[  390.502536] FAT-fs (loop3): Directory bread(block 1037) failed
[  390.512533] FAT-fs (loop3): Directory bread(block 1038) failed
[  390.522876] FAT-fs (loop3): Directory bread(block 1039) failed
[  390.533087] FAT-fs (loop3): Directory bread(block 1040) failed
[  390.542744] FAT-fs (loop3): Directory bread(block 1041) failed
[  390.553558] FAT-fs (loop3): Directory bread(block 1042) failed
[  390.573613] FAT-fs (loop5): bogus number of reserved sectors
[  390.579507] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:20 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x40000000}}, 0x1c)

23:11:20 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:20 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x1400, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:20 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xffffdd86, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:20 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msXos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:20 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

23:11:20 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407250200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:20 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  391.023300] binder: tried to use weak ref as strong ref
[  391.028790] binder: 3892:3896 Release 1 refcount change on invalid ref 0 ret -22
[  391.045641] FAT-fs (loop5): bogus number of reserved sectors
[  391.051531] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:20 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x806000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:20 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xf0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:20 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  391.070847] FAT-fs (loop3): Directory bread(block 9481) failed
[  391.076945] FAT-fs (loop3): Directory bread(block 9482) failed
[  391.082971] FAT-fs (loop3): Directory bread(block 9483) failed
[  391.091307] FAT-fs (loop3): Directory bread(block 9484) failed
[  391.101320] FAT-fs (loop3): Directory bread(block 9485) failed
[  391.111403] FAT-fs (loop3): Directory bread(block 9486) failed
23:11:20 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms>os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:20 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x100000000000018d}, 0x68)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xb1125f61a6c0532a, 0x0)

23:11:20 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204079e0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  391.119542] binder: tried to use weak ref as strong ref
[  391.125580] binder: 3892:3912 Release 1 refcount change on invalid ref 0 ret -22
[  391.131228] binder: BINDER_SET_CONTEXT_MGR already set
[  391.133338] FAT-fs (loop3): Directory bread(block 9487) failed
[  391.144675] FAT-fs (loop3): Directory bread(block 9488) failed
[  391.150690] FAT-fs (loop3): Directory bread(block 9489) failed
[  391.160565] FAT-fs (loop3): Directory bread(block 9490) failed
[  391.162641] binder: 3892:3896 ioctl 40046207 0 returned -16
23:11:20 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x88a8ffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:20 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  391.312862] binder: tried to use weak ref as strong ref
[  391.318414] binder: 3936:3952 Release 1 refcount change on invalid ref 0 ret -22
[  391.338617] FAT-fs (loop3): Directory bread(block 40457) failed
[  391.344766] FAT-fs (loop3): Directory bread(block 40458) failed
[  391.350867] FAT-fs (loop3): Directory bread(block 40459) failed
[  391.357391] FAT-fs (loop5): bogus number of reserved sectors
[  391.359319] FAT-fs (loop3): Directory bread(block 40460) failed
[  391.363228] FAT-fs (loop5): Can't find a valid FAT filesystem
[  391.376042] FAT-fs (loop3): Directory bread(block 40461) failed
[  391.396222] FAT-fs (loop3): Directory bread(block 40462) failed
[  391.406525] FAT-fs (loop3): Directory bread(block 40463) failed
[  391.406819] binder: BINDER_SET_CONTEXT_MGR already set
[  391.416783] FAT-fs (loop3): Directory bread(block 40464) failed
[  391.418261] binder: tried to use weak ref as strong ref
[  391.427263] FAT-fs (loop3): Directory bread(block 40465) failed
[  391.429443] binder: 3936:3952 Release 1 refcount change on invalid ref 0 ret -22
[  391.443269] FAT-fs (loop3): Directory bread(block 40466) failed
[  391.464599] binder: 3936:3940 ioctl 40046207 0 returned -16
23:11:21 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xac14141b}}, 0x1c)

23:11:21 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x543, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:21 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms.os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:21 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x2000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:21 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdosz', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:21 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407050200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:21 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:21 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  391.951382] FAT-fs (loop3): Directory bread(block 1289) failed
[  391.957620] FAT-fs (loop3): Directory bread(block 1290) failed
[  391.963640] FAT-fs (loop3): Directory bread(block 1291) failed
[  391.970668] binder: tried to use weak ref as strong ref
[  391.972434] FAT-fs (loop3): Directory bread(block 1292) failed
[  391.976181] binder: 3983:3988 Release 1 refcount change on invalid ref 0 ret -22
[  391.982323] FAT-fs (loop3): Directory bread(block 1293) failed
23:11:21 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x2202, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  392.000968] FAT-fs (loop3): Directory bread(block 1294) failed
[  392.011069] FAT-fs (loop3): Directory bread(block 1295) failed
[  392.019430] binder: BINDER_SET_CONTEXT_MGR already set
[  392.024912] FAT-fs (loop3): Directory bread(block 1296) failed
[  392.030067] binder: tried to use weak ref as strong ref
[  392.031286] FAT-fs (loop3): Directory bread(block 1297) failed
[  392.036305] binder: 3983:4007 Release 1 refcount change on invalid ref 0 ret -22
23:11:21 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d730e6f7300", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:21 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x7fffffff, 0x8, 0x4, 0x1e, 0x1, 0x6}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000040)="8b3e9ed2f50005614605", &(0x7f0000000080)=""/27}, 0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:21 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x6, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  392.050358] binder: 3983:3988 ioctl 40046207 0 returned -16
23:11:21 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407060200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:21 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f730e", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  392.072717] FAT-fs (loop3): Directory bread(block 1298) failed
23:11:21 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x8906, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:21 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8100, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  392.127699] binder: tried to use weak ref as strong ref
[  392.133204] binder: 4017:4021 Release 1 refcount change on invalid ref 0 ret -22
[  392.165311] binder: BINDER_SET_CONTEXT_MGR already set
[  392.171642] binder: 4017:4021 ioctl 40046207 0 returned -16
[  392.177877] binder: tried to use weak ref as strong ref
[  392.183308] binder: 4017:4030 Release 1 refcount change on invalid ref 0 ret -22
[  392.211275] FAT-fs (loop3): Directory bread(block 1545) failed
[  392.217359] FAT-fs (loop3): Directory bread(block 1546) failed
[  392.223370] FAT-fs (loop3): Directory bread(block 1547) failed
[  392.231641] FAT-fs (loop3): Directory bread(block 1548) failed
[  392.241667] FAT-fs (loop3): Directory bread(block 1549) failed
[  392.251761] FAT-fs (loop3): Directory bread(block 1550) failed
[  392.261784] FAT-fs (loop3): Directory bread(block 1551) failed
[  392.271872] FAT-fs (loop3): Directory bread(block 1552) failed
[  392.282327] FAT-fs (loop3): Directory bread(block 1553) failed
[  392.292113] FAT-fs (loop3): Directory bread(block 1554) failed
23:11:22 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0xfffffffffffff000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:22 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xa000000}}, 0x1c)

23:11:22 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xfdffffff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:22 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msTos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:22 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x400000)

23:11:22 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:22 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407080200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:22 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  392.793817] binder: tried to use weak ref as strong ref
[  392.799276] binder: 4064:4066 Release 1 refcount change on invalid ref 0 ret -22
[  392.806742] FAT-fs (loop3): Directory bread(block 2057) failed
[  392.812859] FAT-fs (loop3): Directory bread(block 2058) failed
[  392.819037] FAT-fs (loop3): Directory bread(block 2059) failed
[  392.827282] FAT-fs (loop3): Directory bread(block 2060) failed
[  392.834031] FAT-fs (loop5): bogus number of reserved sectors
23:11:22 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x2202000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  392.839900] FAT-fs (loop5): Can't find a valid FAT filesystem
[  392.839909] FAT-fs (loop3): Directory bread(block 2061) failed
[  392.839926] FAT-fs (loop3): Directory bread(block 2062) failed
[  392.869010] binder: tried to use weak ref as strong ref
[  392.874482] binder: 4064:4085 Release 1 refcount change on invalid ref 0 ret -22
[  392.877438] FAT-fs (loop3): Directory bread(block 2063) failed
[  392.882796] binder: BINDER_SET_CONTEXT_MGR already set
23:11:22 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xf000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:22 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:22 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msxos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:22 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00'], 0x0, 0x0, &(0x7f0000000280)})

23:11:22 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407070200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  392.888391] FAT-fs (loop3): Directory bread(block 2064) failed
[  392.900994] binder: 4064:4066 ioctl 40046207 0 returned -16
[  392.904245] FAT-fs (loop3): Directory bread(block 2065) failed
[  392.914251] FAT-fs (loop3): Directory bread(block 2066) failed
23:11:22 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x7, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:22 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xf0ffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  393.049622] binder: 4107:4115 unknown command 8
[  393.055265] FAT-fs (loop3): Directory bread(block 1801) failed
[  393.058071] FAT-fs (loop5): bogus number of reserved sectors
[  393.061333] FAT-fs (loop3): Directory bread(block 1802) failed
[  393.061348] FAT-fs (loop3): Directory bread(block 1803) failed
[  393.067167] FAT-fs (loop5): Can't find a valid FAT filesystem
[  393.075564] FAT-fs (loop3): Directory bread(block 1804) failed
[  393.091536] FAT-fs (loop3): Directory bread(block 1805) failed
[  393.108641] binder: 4107:4115 ioctl c0306201 200003c0 returned -22
[  393.115099] FAT-fs (loop3): Directory bread(block 1806) failed
[  393.121577] FAT-fs (loop3): Directory bread(block 1807) failed
[  393.132008] FAT-fs (loop3): Directory bread(block 1808) failed
[  393.141882] FAT-fs (loop3): Directory bread(block 1809) failed
[  393.148118] binder: BINDER_SET_CONTEXT_MGR already set
23:11:22 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms-os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  393.153486] FAT-fs (loop3): Directory bread(block 1810) failed
[  393.190998] binder: 4107:4129 ioctl 40046207 0 returned -16
23:11:22 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x86ddffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:22 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xe8030000}}, 0x1c)

23:11:22 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73fd", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:22 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
capset(&(0x7f0000000080)={0x19980330, r1}, &(0x7f00000000c0)={0x7ff, 0x5, 0x1, 0x6, 0x1, 0x8001})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0463044000fcffffff63044000000000"], 0x0, 0x0, &(0x7f0000000280)})

23:11:22 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xfeffffff00000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:22 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms*os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:22 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121c", 0x41, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:22 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407100200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:22 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x6488, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  393.639170] binder: 4158:4168 IncRefs 0 refcount change on invalid ref -1024 ret -22
[  393.647200] binder: 4158:4168 unknown command 1074029567
[  393.655838] FAT-fs (loop3): Directory bread(block 4105) failed
[  393.661984] FAT-fs (loop3): Directory bread(block 4106) failed
[  393.668018] FAT-fs (loop3): Directory bread(block 4107) failed
[  393.676627] FAT-fs (loop3): Directory bread(block 4108) failed
[  393.681017] binder: 4158:4168 ioctl c0306201 200003c0 returned -22
23:11:22 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x8848000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  393.686627] FAT-fs (loop3): Directory bread(block 4109) failed
[  393.691137] binder: BINDER_SET_CONTEXT_MGR already set
[  393.696803] FAT-fs (loop3): Directory bread(block 4110) failed
[  393.706799] FAT-fs (loop3): Directory bread(block 4111) failed
[  393.711257] binder: 4158:4180 IncRefs 0 refcount change on invalid ref -1024 ret -22
[  393.717622] FAT-fs (loop3): Directory bread(block 4112) failed
[  393.720824] binder: 4158:4180 unknown command 1074029567
[  393.726891] FAT-fs (loop3): Directory bread(block 4113) failed
23:11:23 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407140200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:23 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

[  393.741441] FAT-fs (loop3): Directory bread(block 4114) failed
[  393.747797] binder: 4158:4168 ioctl 40046207 0 returned -16
[  393.754624] binder: 4158:4180 ioctl c0306201 200003c0 returned -22
23:11:23 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0xfeffffff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:23 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msoos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:23 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x608, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:23 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  393.870618] binder: tried to use weak ref as strong ref
[  393.876084] binder: 4200:4204 Release 1 refcount change on invalid ref 0 ret -22
[  393.891377] FAT-fs (loop3): Directory bread(block 5129) failed
[  393.897479] FAT-fs (loop3): Directory bread(block 5130) failed
[  393.903593] FAT-fs (loop3): Directory bread(block 5131) failed
[  393.914595] FAT-fs (loop3): Directory bread(block 5132) failed
23:11:23 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x800e0000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  393.923647] FAT-fs (loop3): Directory bread(block 5133) failed
[  393.933883] FAT-fs (loop3): Directory bread(block 5134) failed
[  393.937623] binder: BINDER_SET_CONTEXT_MGR already set
[  393.944020] FAT-fs (loop3): Directory bread(block 5135) failed
[  393.954279] FAT-fs (loop3): Directory bread(block 5136) failed
[  393.954360] binder: tried to use weak ref as strong ref
[  393.960412] FAT-fs (loop3): Directory bread(block 5137) failed
[  393.965797] binder: 4200:4213 Release 1 refcount change on invalid ref 0 ret -22
[  393.975816] FAT-fs (loop3): Directory bread(block 5138) failed
[  394.017627] binder: 4200:4204 ioctl 40046207 0 returned -16
[  394.066906] FAT-fs (loop5): bogus number of reserved sectors
[  394.072836] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:23 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfe80}}, 0x1c)

23:11:23 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407420200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:23 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x4305, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:23 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x7, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:23 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)=0x10000, 0x0)
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c630463044000000000ae997652af12ce3f606976d6672410dad4c9e7bcc7127864c4074d1aec5527c64500c25c7d695d213cfb71f303013583835bc19e39924ce8816d8d9058f7fb08484724b32f4c5e7d506664c6c8d7e80f"], 0xb, 0x0, &(0x7f0000000080)="44e8978ccc6c1e0f2c1d47"})
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x400, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)

23:11:23 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms\nos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:23 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:23 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b3423034", 0x62, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  394.475439] binder: 4258:4262 unknown command 1661231884
[  394.486346] FAT-fs (loop5): bogus number of reserved sectors
[  394.492281] FAT-fs (loop5): Can't find a valid FAT filesystem
[  394.513406] Unknown ioctl 30468
23:11:23 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x4888, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  394.523163] binder: 4258:4262 ioctl c0306201 200003c0 returned -22
23:11:23 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:23 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0400027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:23 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms%os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:23 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:23 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

[  394.556629] binder: 4258:4278 unknown command 1661231884
[  394.572683] binder: 4258:4278 ioctl c0306201 200003c0 returned -22
[  394.588090] Unknown ioctl 30468
23:11:23 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x600000000000000, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:23 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x1400000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  394.693923] binder: tried to use weak ref as strong ref
[  394.699419] binder: 4303:4306 Release 1 refcount change on invalid ref 0 ret -22
[  394.731121] FAT-fs (loop3): Directory bread(block 2571) failed
[  394.737195] FAT-fs (loop3): Directory bread(block 2572) failed
[  394.743246] FAT-fs (loop3): Directory bread(block 2573) failed
[  394.751621] FAT-fs (loop3): Directory bread(block 2574) failed
[  394.761780] FAT-fs (loop3): Directory bread(block 2575) failed
[  394.770628] binder: tried to use weak ref as strong ref
[  394.771092] binder: BINDER_SET_CONTEXT_MGR already set
[  394.776066] binder: 4303:4319 Release 1 refcount change on invalid ref 0 ret -22
[  394.788973] FAT-fs (loop3): Directory bread(block 2576) failed
[  394.790968] binder: 4303:4306 ioctl 40046207 0 returned -16
[  394.795033] FAT-fs (loop3): Directory bread(block 2577) failed
[  394.795050] FAT-fs (loop3): Directory bread(block 2578) failed
[  394.795067] FAT-fs (loop3): Directory bread(block 2579) failed
[  394.795083] FAT-fs (loop3): Directory bread(block 2580) failed
[  394.866324] FAT-fs (loop5): bogus number of reserved sectors
[  394.872283] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:24 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)

23:11:24 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x7, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:24 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mssos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:24 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x7000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:24 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0a00027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:24 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

23:11:24 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:24 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596c", 0x72, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:24 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:24 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xf0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  395.338452] FAT-fs (loop3): Directory bread(block 2577) failed
[  395.348814] FAT-fs (loop3): Directory bread(block 2578) failed
[  395.354914] FAT-fs (loop3): Directory bread(block 2579) failed
[  395.360947] FAT-fs (loop3): Directory bread(block 2580) failed
[  395.368982] FAT-fs (loop3): Directory bread(block 2581) failed
[  395.379083] FAT-fs (loop3): Directory bread(block 2582) failed
23:11:24 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xf0ffff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:24 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mslos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  395.389181] FAT-fs (loop3): Directory bread(block 2583) failed
[  395.399644] FAT-fs (loop3): Directory bread(block 2584) failed
[  395.409310] FAT-fs (loop3): Directory bread(block 2585) failed
[  395.419659] FAT-fs (loop3): Directory bread(block 2586) failed
23:11:24 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x1f4}}, 0x1c)

23:11:24 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0300027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:24 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xa00, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  395.463882] binder: tried to use weak ref as strong ref
[  395.469430] binder: 4364:4371 Release 1 refcount change on invalid ref 0 ret -22
23:11:24 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x1c000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:24 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  395.504251] binder: BINDER_SET_CONTEXT_MGR already set
[  395.510076] binder: 4364:4371 ioctl 40046207 0 returned -16
[  395.528362] binder: tried to use weak ref as strong ref
[  395.533963] binder: 4364:4375 Release 1 refcount change on invalid ref 0 ret -22
23:11:24 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x610200, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:24 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x4000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:24 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x86ddffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:24 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msios\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  395.615765] FAT-fs (loop3): Directory bread(block 2570) failed
[  395.621861] FAT-fs (loop3): Directory bread(block 2571) failed
[  395.627874] FAT-fs (loop3): Directory bread(block 2572) failed
[  395.636168] FAT-fs (loop3): Directory bread(block 2573) failed
[  395.656291] FAT-fs (loop3): Directory bread(block 2574) failed
23:11:24 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0060027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  395.666840] FAT-fs (loop3): Directory bread(block 2575) failed
[  395.675257] FAT-fs (loop3): Directory bread(block 2576) failed
[  395.681339] FAT-fs (loop3): Directory bread(block 2577) failed
[  395.687408] FAT-fs (loop3): Directory bread(block 2578) failed
[  395.697345] FAT-fs (loop3): Directory bread(block 2579) failed
23:11:25 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x4888, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  395.740555] binder: tried to use weak ref as strong ref
[  395.746012] binder: 4407:4412 Release 1 refcount change on invalid ref 0 ret -22
[  395.766575] binder: BINDER_SET_CONTEXT_MGR already set
[  395.773067] binder: 4407:4412 ioctl 40046207 0 returned -16
[  395.783316] binder: tried to use weak ref as strong ref
[  395.788769] binder: 4407:4423 Release 1 refcount change on invalid ref 0 ret -22
[  395.890212] FAT-fs (loop3): bogus number of FAT structure
[  395.896006] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:25 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c", 0x7a, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:25 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:25 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x689, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:25 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:25 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mspos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  396.218345] binder: tried to use weak ref as strong ref
[  396.223784] binder: 4445:4446 Release 1 refcount change on invalid ref 0 ret -22
[  396.243167] FAT-fs (loop5): bogus number of reserved sectors
[  396.249055] FAT-fs (loop5): Can't find a valid FAT filesystem
[  396.250889] binder: BINDER_SET_CONTEXT_MGR already set
[  396.260287] binder: tried to use weak ref as strong ref
[  396.260911] binder: 4445:4446 ioctl 40046207 0 returned -16
[  396.265769] binder: 4445:4453 Release 1 refcount change on invalid ref 0 ret -22
23:11:25 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfc}}, 0x1c)

23:11:25 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x800000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:25 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a1400027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:25 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x100000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:25 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = socket$inet(0x2, 0x8000a, 0xfb)
r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x80)
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="3600000016000000000000000040000004000000c7de64d29494d96b0000000005fffffff800008100002000000000002f6465762f62696e646572230000fb7199e6eb1cece5642e148f072a2cdb4b98f4c8d779f6937c412a220188cffcec9a28c259043c43719ef0aeb81f12dfb1bc661ab7ce9da41ff6f2176356434334e9fc50d723de524cc5668ba5d595a4b8e030d10d27e79daf2826c433d40c16431f13ccc7a69ea5c5b7269a2c70b3a38f3e9c8914e08b786130eea26817fd773ede125877c31d40888fea459da0d34a8830f2bd39b404fdb32286b88c046b21f22150018cdd9613d67cfe51603f7b6808f9f162d4d11eff9ad168"], 0x36)
setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000000)={@remote, @local}, 0x8)

23:11:25 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms0os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:25 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdosh', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  396.398193] FAT-fs (loop3): Directory bread(block 2587) failed
[  396.404309] FAT-fs (loop3): Directory bread(block 2588) failed
[  396.410337] FAT-fs (loop3): Directory bread(block 2589) failed
[  396.411076] binder: tried to use weak ref as strong ref
[  396.418629] FAT-fs (loop3): Directory bread(block 2590) failed
[  396.421747] binder: 4476:4482 Release 1 refcount change on invalid ref 0 ret -22
[  396.430723] binder: BINDER_SET_CONTEXT_MGR already set
[  396.435400] FAT-fs (loop3): Directory bread(block 2591) failed
23:11:25 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x700000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  396.440762] binder: tried to use weak ref as strong ref
[  396.452176] binder: 4476:4486 Release 1 refcount change on invalid ref 0 ret -22
[  396.458082] FAT-fs (loop3): Directory bread(block 2592) failed
[  396.466718] FAT-fs (loop3): Directory bread(block 2593) failed
[  396.467991] binder: 4476:4482 ioctl 40046207 0 returned -16
[  396.472753] FAT-fs (loop3): Directory bread(block 2594) failed
[  396.489267] FAT-fs (loop3): Directory bread(block 2595) failed
23:11:25 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04bfbdce1b044000000000"], 0x0, 0x0, &(0x7f0000000280)})
r1 = dup3(r0, r0, 0x80000)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x3, 0x1ff}, {0x0, 0x1}, {0x3, 0x7f}], 0x3)

23:11:25 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8848000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:25 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a4200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  396.499283] FAT-fs (loop3): Directory bread(block 2596) failed
[  396.602954] binder: 4506:4510 unknown command -826425596
[  396.622245] binder: 4506:4510 ioctl c0306201 200003c0 returned -22
[  396.637419] binder: 4506:4514 unknown command -826425596
[  396.643729] binder: BINDER_SET_CONTEXT_MGR already set
[  396.649221] binder: 4506:4514 ioctl c0306201 200003c0 returned -22
[  396.655959] binder: 4506:4510 ioctl 40046207 0 returned -16
23:11:26 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x1400000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:26 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms#os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:26 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:26 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xfffffffffffff000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:26 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

[  397.156172] binder: tried to use weak ref as strong ref
[  397.161762] binder: 4530:4533 Release 1 refcount change on invalid ref 0 ret -22
[  397.182691] binder: 4530:4542 ioctl 1274 0 returned -22
[  397.189589] FAT-fs (loop5): bogus number of reserved sectors
[  397.190167] binder: BINDER_SET_CONTEXT_MGR already set
[  397.195517] FAT-fs (loop5): Can't find a valid FAT filesystem
[  397.206874] binder: tried to use weak ref as strong ref
[  397.206955] binder: 4530:4533 ioctl 40046207 0 returned -16
[  397.212303] binder: 4530:4542 Release 1 refcount change on invalid ref 0 ret -22
23:11:26 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x4}}, 0x1c)

23:11:26 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362", 0x7e, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:26 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x800e0000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:26 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0fff027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:26 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:26 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msuos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:26 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:26 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x1000, 0x7}, {&(0x7f0000000080)="d8b79ba203f1d6c7c4fb249864831b5167eac7a14de4d854818486a19319197dbeca6c6eca01f27c1d76f7c8ab87654d8cc3c128dead9fc5090ee6d0dba6abfce07d05fa9a13079ddca7a5df3467ebd38efa7a00e129b2db50412f2bbf0be2b27d2aaa5644abaf379a00ac863f101504b84560", 0x73, 0x100}, {&(0x7f0000001400)="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", 0x1000, 0x7}, {&(0x7f0000000140)="4ecdcf8dc802a58009d28aab2ae6e4c6df788d9585da7984b762f874c4d37a0a9177e626692a53", 0x27, 0x6}], 0xc000, &(0x7f0000000280)={[{@ssd_spread='ssd_spread'}, {@clear_cache='clear_cache'}, {@ssd='ssd'}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ref_verify='ref_verify'}, {@space_cache_v1='space_cache=v1'}, {@max_inline={'max_inline', 0x3d, [0x67, 0x37, 0x2d, 0x72, 0x37, 0x35, 0x36, 0x31, 0x7b]}}]})

23:11:26 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x543, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  397.326886] FAT-fs (loop3): bogus number of directory entries (767)
[  397.328142] binder: tried to use weak ref as strong ref
[  397.333400] FAT-fs (loop3): Can't find a valid FAT filesystem
[  397.338763] binder: 4563:4569 Release 1 refcount change on invalid ref 0 ret -22
23:11:26 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a1000027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:26 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x20000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  397.408211] binder: BINDER_SET_CONTEXT_MGR already set
[  397.413884] binder: tried to use weak ref as strong ref
[  397.419349] binder: 4563:4571 Release 1 refcount change on invalid ref 0 ret -22
[  397.428662] FAT-fs (loop5): bogus number of reserved sectors
[  397.434605] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:26 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:26 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x806000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  397.463196] binder: 4563:4569 ioctl 40046207 0 returned -16
[  397.497487] FAT-fs (loop3): Directory bread(block 2583) failed
[  397.503673] FAT-fs (loop3): Directory bread(block 2584) failed
23:11:26 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:26 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630403000000000663044000000000"], 0x0, 0x0, &(0x7f0000000280)})

[  397.509693] FAT-fs (loop3): Directory bread(block 2585) failed
[  397.519219] FAT-fs (loop3): Directory bread(block 2586) failed
[  397.528292] FAT-fs (loop3): Directory bread(block 2587) failed
[  397.539731] FAT-fs (loop3): Directory bread(block 2588) failed
[  397.549562] FAT-fs (loop3): Directory bread(block 2589) failed
23:11:26 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='ms+os\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:26 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8847000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  397.559891] FAT-fs (loop3): Directory bread(block 2590) failed
[  397.569971] FAT-fs (loop3): Directory bread(block 2591) failed
[  397.580162] FAT-fs (loop3): Directory bread(block 2592) failed
[  397.636588] FAT-fs (loop5): bogus number of reserved sectors
[  397.642541] FAT-fs (loop5): Can't find a valid FAT filesystem
[  397.658181] binder: 4621:4623 unknown command 50619140
[  397.665401] binder: 4621:4623 ioctl c0306201 200003c0 returned -22
[  397.684150] binder: BINDER_SET_CONTEXT_MGR already set
[  397.689644] binder: 4621:4630 unknown command 50619140
[  397.693657] binder: 4621:4623 ioctl 40046207 0 returned -16
[  397.699583] binder: 4621:4630 ioctl c0306201 200003c0 returned -22
23:11:27 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:27 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a7400027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:27 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x300000000000000}}, 0x1c)

23:11:27 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xd, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:27 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x200000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:27 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mscos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:27 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xffffffffffffff1c, 0x0, &(0x7f00000001c0)=[@increfs, @register_looper], 0x0, 0x0, &(0x7f0000000280)})
r1 = getegid()
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x27, 0xa, &(0x7f0000001740)=[{&(0x7f0000001900)="33968797bd008760d88f7ab291e4519ae1e50c779a30c4d8aec618fc7101ac7819c28c077505158838e0d9165e564293b8502d39606c7aee0f66feda830cbafc6dca135c66867f036b5f7454c310f2c772c2f86419b0e68c5128fb35f74147e796bdda8a9f27be4e91ee4f0b4a71b40c7f538373bce74581ea283f024e601ab6097a0f8c38428db27f3def1ec70eb8cce5551d1ac43e16b13c3d410309040ad9d65502582271df4e937bedf48a9992fbca", 0xb1, 0x9}, {&(0x7f00000002c0)="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", 0xfe, 0x400}, {&(0x7f0000000080)="95b84bffa843c12adf63ec00762b206fb528652558f2d7b2fbea44c35804a7668dd4", 0x22, 0x40000000008}, {&(0x7f0000000400)="65c245b39997ecdf35ac794d163a204f2284576a25344c434b9f10593e789d86d7ce7332c27a0454e52628f7362aa81e21caeb6ceb230f40badeb0a1e15f637ac89d21e10f822dbf8b5e82461a7586bb3ca04a479d5f0c4221a81ad3e30eeb2de9abbe17f38faec6e56d432fff024274d46f8f70fc85b66863e917a8ca09a1e6535e953ee6962eadea0879a3fd19afc192721b28eebb1b8b0e58ff6c69685f87387c01cb4173ea418fe011f15d34776b24360d5cc8ba989f6a59e161263d98693000db4f80ea3d1bbff6b751bde68403749f81a68e918083a98005c37c08746ba270b2cbce43", 0xe6, 0x7}, {&(0x7f0000000500)="831c00a96f614d143f797a80896b31e034e52b193fae6982b376cbb51f59b9c62d5804f1fd16fe82f49ca0f0ea0f83cf506e5c912e7117d35819bfe5d5466a5f7e53924884091a054c02884509244ae3ad4cbcb89c1cfbc7c584e256e8c876704af53a7a949651f1ee762a44b4fffc38af079f964fd34b730269c385e95093cd1b058d654b1999605a49a4fa9303d3c52d7f573309eea6636a02f15ed87b", 0x9e, 0x8000}, {&(0x7f00000005c0)="15c681815bb7ada520748467a9b1f70efc8911430393d9f8f2da37ca1e9cc8b18f2b3fa557faa357a8d918036b2d2663d1aa90d95ed0837c9d54450c099727df6cbeec4883abb47de859654eb41e70d674404f18f36069535e65aefe2a67348dd90f57b99091c677d032b582c647a7652a2d29d229d8f5207f12131796278930b900fcbd43fafaae1e3b3180e516217aa95b0b36ff395ff0b101a494527eb20bf14fcd543b549e204613a2407d72ab710990306c723d6d6f49a3d684ffb7a3e0e054cb6ceb6f2a59d9b3b0fddca03dda49eb88db565ff12d4d1272cf57c21b", 0xdf, 0x3}, {&(0x7f00000006c0)="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", 0x1000, 0x401}, {&(0x7f00000000c0)="2302fa810851bc931e081c3ca65cdeb7305f7014975566fc4f4269f18f4a0ab464ffab5844e410", 0x27, 0x4cee}, {&(0x7f0000000140)="e0b3370f3a4a9d83a67271beac560c2d89e97957246d1a9bc91cd7afadbc711f4a7d1e87d75cd2b12fb7f88bbab5ea18d7c9d7fe0834e5e25c68207728a6341a1624", 0x42, 0x83}, {&(0x7f00000016c0)="42d474a2d6645656eed5bfcf85ead6ab76b2671332f9f0914f094fc9e72fc12d5bc72f7721c2abde0263c3c8e665b6d49b1c7e060bafce363fef70b16090480abeaf53b49f183b87679e3a3c37", 0x4d, 0x1eff762c}], 0x0, &(0x7f0000001840)={[{@umask={'umask', 0x3d, 0x3}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@gid={'gid', 0x3d, r1}}, {@utf8='utf8'}, {@dmask={'dmask', 0x3d, 0x3f}}, {@nls={'nls', 0x3d, 'cp857'}}]})

23:11:27 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:27 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8035000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  398.277642] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  398.297577] ntfs: (device loop7): parse_options(): Unrecognized mount option .
[  398.309095] binder: BINDER_SET_CONTEXT_MGR already set
[  398.310760] FAT-fs (loop3): Directory bread(block 2683) failed
[  398.320431] FAT-fs (loop3): Directory bread(block 2684) failed
23:11:27 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x43050000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  398.327076] FAT-fs (loop3): Directory bread(block 2685) failed
[  398.337165] FAT-fs (loop3): Directory bread(block 2686) failed
[  398.347444] FAT-fs (loop3): Directory bread(block 2687) failed
[  398.357514] FAT-fs (loop3): Directory bread(block 2688) failed
[  398.367570] FAT-fs (loop3): Directory bread(block 2689) failed
23:11:27 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msd\ns\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:27 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0f00027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  398.373609] FAT-fs (loop3): Directory bread(block 2690) failed
[  398.379643] FAT-fs (loop3): Directory bread(block 2691) failed
[  398.384103] binder: 4646:4656 ioctl 40046207 0 returned -16
[  398.387980] FAT-fs (loop3): Directory bread(block 2692) failed
23:11:27 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x88caffff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:27 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x4305, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:27 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:27 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x300, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:27 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={<r2=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flat={0x776a2a85, 0x1, r1, 0x4}, @fda={0x66646185, 0xa, 0x1, 0x26}, @flat={0x77682a85, 0x0, r2, 0x3}], &(0x7f0000000140)=[0x30]}, 0x1f}}, @clear_death={0x400c630f, 0x4, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ptr={0x70742a85, 0x1, &(0x7f0000000180), 0x0, 0x0, 0x34}], &(0x7f0000000240)=[0x0, 0x28, 0x0]}}, @enter_looper, @clear_death={0x400c630f, 0x2, 0x2}, @reply_sg={0x40486312, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x38, 0x20, 0x78, 0x38, 0x18, 0x38, 0x0, 0x68]}, 0xfffffffffffffffe}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@fda={0x66646185, 0x4, 0x0, 0x1a}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x1, 0xd}], &(0x7f0000000400)=[0x18, 0x18, 0x20, 0x38]}}, @acquire_done={0x40106309, r2, 0x1}], 0xeb, 0x0, &(0x7f00000005c0)="f2383c58ece557e447015636ee07537931424a3b170b145067ee756d71e70303311c9e"})

[  398.480268] FAT-fs (loop3): Directory bread(block 2582) failed
[  398.486399] FAT-fs (loop3): Directory bread(block 2583) failed
[  398.500785] FAT-fs (loop3): Directory bread(block 2584) failed
[  398.506843] FAT-fs (loop3): Directory bread(block 2585) failed
[  398.513102] FAT-fs (loop3): Directory bread(block 2586) failed
[  398.521153] FAT-fs (loop3): Directory bread(block 2587) failed
23:11:27 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msd%s\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  398.531658] FAT-fs (loop3): Directory bread(block 2588) failed
[  398.541663] FAT-fs (loop3): Directory bread(block 2589) failed
[  398.551756] FAT-fs (loop3): Directory bread(block 2590) failed
[  398.561828] FAT-fs (loop3): Directory bread(block 2591) failed
[  398.636908] FAT-fs (loop5): bogus number of reserved sectors
[  398.642814] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:28 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8848, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:28 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x700000000000000}}, 0x1c)

23:11:28 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdod\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:28 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0210027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:28 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x806, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:28 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:28 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f0", 0x81, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:28 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xa, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  399.116183] FAT-fs (loop3): Directory bread(block 2569) failed
[  399.122256] FAT-fs (loop3): Directory bread(block 2570) failed
[  399.128690] FAT-fs (loop3): Directory bread(block 2571) failed
[  399.137445] FAT-fs (loop3): Directory bread(block 2572) failed
[  399.147509] FAT-fs (loop3): Directory bread(block 2573) failed
[  399.157556] FAT-fs (loop3): Directory bread(block 2574) failed
23:11:28 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x700, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:28 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo\n\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:28 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a026c027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  399.163698] FAT-fs (loop3): Directory bread(block 2575) failed
[  399.169788] FAT-fs (loop3): Directory bread(block 2576) failed
[  399.177934] FAT-fs (loop3): Directory bread(block 2577) failed
[  399.188094] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:28 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xffffdd86, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:28 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7302", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:28 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xf0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  399.294967] FAT-fs (loop3): bogus number of directory entries (620)
[  399.301554] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:28 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="84630440000000000663044000000000"], 0x0, 0x0, &(0x7f0000000280)})

23:11:28 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdol\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:28 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020e027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  399.411813] binder: BINDER_SET_CONTEXT_MGR already set
[  399.419199] binder: 4718:4805 ioctl 40046207 0 returned -16
[  399.472700] FAT-fs (loop3): bogus number of directory entries (526)
[  399.479218] FAT-fs (loop3): Can't find a valid FAT filesystem
[  399.524304] binder: 4825:4826 unknown command 1074029444
[  399.529912] binder: 4825:4826 ioctl c0306201 200003c0 returned -22
[  399.539964] binder: BINDER_SET_CONTEXT_MGR already set
[  399.545341] binder: 4825:4827 ioctl 40046207 0 returned -16
23:11:29 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x2000000000000000}}, 0x1c)

23:11:29 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x700000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:29 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xd00000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:29 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos"', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:29 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020a027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:29 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:29 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoo\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:29 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
readahead(r0, 0x8000, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x410000)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={<r2=>0x0, 0xfffffffffffffff7}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r2, 0x22, "24d8cc6450248b5206de8de133edea9fd3d6ebfb0df41796b77168818ff8d7ea8c09"}, &(0x7f0000000140)=0x2a)

23:11:29 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x4305000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:29 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  399.999935] FAT-fs (loop3): bogus number of directory entries (522)
[  400.006453] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:29 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200427400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:29 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73af", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  400.069933] binder: tried to use weak ref as strong ref
[  400.075440] binder: 4853:4856 Release 1 refcount change on invalid ref 0 ret -22
[  400.098041] binder: BINDER_SET_CONTEXT_MGR already set
23:11:29 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xb000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:29 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x2000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:29 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:29 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044010000000065185c73713e763044000000000283f6e7d70bae3706fad0440e5fc396c11b100ac940cb0d270aee9e2188940"], 0x0, 0x0, &(0x7f0000000280)})

[  400.116735] binder: tried to use weak ref as strong ref
[  400.122192] binder: 4853:4856 Release 1 refcount change on invalid ref 0 ret -22
[  400.134081] binder: 4853:4866 ioctl 40046207 0 returned -16
[  400.166102] FAT-fs (loop3): Directory bread(block 2569) failed
[  400.172236] FAT-fs (loop3): Directory bread(block 2570) failed
[  400.178257] FAT-fs (loop3): Directory bread(block 2571) failed
[  400.186582] FAT-fs (loop3): Directory bread(block 2572) failed
[  400.196607] FAT-fs (loop3): Directory bread(block 2573) failed
[  400.206742] FAT-fs (loop3): Directory bread(block 2574) failed
[  400.216797] FAT-fs (loop3): Directory bread(block 2575) failed
[  400.226962] FAT-fs (loop3): Directory bread(block 2576) failed
[  400.236923] FAT-fs (loop3): Directory bread(block 2577) failed
[  400.247073] FAT-fs (loop3): Directory bread(block 2578) failed
[  400.309955] binder: 4895:4897 IncRefs 0 refcount change on invalid ref 16 ret -22
[  400.317690] binder: 4895:4897 unknown command -947564282
[  400.324463] binder: 4895:4897 ioctl c0306201 200003c0 returned -22
[  400.332758] binder: BINDER_SET_CONTEXT_MGR already set
[  400.338874] binder: 4895:4903 IncRefs 0 refcount change on invalid ref 16 ret -22
[  400.346561] binder: 4895:4903 unknown command -947564282
[  400.353815] binder: 4895:4897 ioctl 40046207 0 returned -16
[  400.360429] binder: 4895:4903 ioctl c0306201 200003c0 returned -22
23:11:30 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x100000000000000}}, 0x1c)

23:11:30 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo%\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:30 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:30 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0268027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:30 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x2000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:30 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x2000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:30 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:30 executing program 7:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/rtc0\x00', 0x0, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000bc0)=""/9, &(0x7f0000000c00)=0x9)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:30 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x14000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:30 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xfeffffff00000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  400.812509] binder: tried to use weak ref as strong ref
[  400.817965] binder: 4914:4921 Release 1 refcount change on invalid ref 0 ret -22
[  400.847887] FAT-fs (loop3): bogus number of directory entries (616)
[  400.854434] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:30 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0273027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  400.872762] FAT-fs (loop5): bogus number of reserved sectors
[  400.878709] FAT-fs (loop5): Can't find a valid FAT filesystem
[  400.912708] binder: BINDER_SET_CONTEXT_MGR already set
23:11:30 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo0\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:30 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140), 0x0)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  400.919697] binder: tried to use weak ref as strong ref
[  400.925170] binder: 4914:4944 Release 1 refcount change on invalid ref 0 ret -22
[  400.936388] binder: 4914:4921 ioctl 40046207 0 returned -16
23:11:30 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8906, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:30 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:30 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x88640000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  400.978193] FAT-fs (loop3): bogus number of directory entries (627)
[  400.984903] FAT-fs (loop3): Can't find a valid FAT filesystem
[  401.117998] FAT-fs (loop5): bogus number of reserved sectors
[  401.124391] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:30 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfc000000}}, 0x1c)

23:11:30 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0204027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:30 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x2)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd0, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x62e1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040}, 0x800)

23:11:30 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140), 0x0)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:30 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x14000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:30 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x6, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:30 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoi\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:30 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  401.689099] binder: tried to use weak ref as strong ref
[  401.694583] binder: 4991:4992 Release 1 refcount change on invalid ref 0 ret -22
23:11:31 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0207027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:31 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x100)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21}, 0x10)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xd9a, 0x100)

23:11:31 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x2, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:31 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140), 0x0)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  401.733586] FAT-fs (loop3): bogus number of directory entries (516)
[  401.739403] binder: tried to use weak ref as strong ref
[  401.740135] FAT-fs (loop3): Can't find a valid FAT filesystem
[  401.745516] binder: 4991:5006 Release 1 refcount change on invalid ref 0 ret -22
[  401.752236] binder: BINDER_SET_CONTEXT_MGR already set
[  401.765175] binder: 4991:4992 ioctl 40046207 0 returned -16
23:11:31 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x88470000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:31 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo*\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:31 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73a7", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  401.850842] FAT-fs (loop3): bogus number of directory entries (519)
[  401.857363] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:31 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0248027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  401.895959] binder: tried to use weak ref as strong ref
[  401.901520] binder: 5027:5032 Release 1 refcount change on invalid ref 0 ret -22
[  401.958841] binder: BINDER_SET_CONTEXT_MGR already set
[  401.965703] binder: 5027:5047 ioctl 40046207 0 returned -16
[  401.972811] binder: tried to use weak ref as strong ref
[  401.978261] binder: 5027:5032 Release 1 refcount change on invalid ref 0 ret -22
[  401.995855] FAT-fs (loop3): bogus number of directory entries (584)
[  402.002411] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:31 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xb80b0000}}, 0x1c)

23:11:31 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x689, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:31 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x20011, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xfffffe9e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03e30840", @ANYRES64=r1, @ANYBLOB='\fc\x00\x00'], 0x0, 0x0, &(0x7f0000000280)})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x49)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x9, [@remote, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ae770fffdf5d", @random="22a911686737", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @empty, @remote]})

23:11:31 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:31 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xf000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:31 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200037400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:31 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoX\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:31 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(0xffffffffffffffff, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:31 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x6000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  402.619214] binder: 5074:5075 unknown command 1074324227
[  402.629675] FAT-fs (loop3): Directory bread(block 2569) failed
[  402.635757] FAT-fs (loop3): Directory bread(block 2570) failed
[  402.641790] FAT-fs (loop3): Directory bread(block 2571) failed
[  402.650716] FAT-fs (loop3): Directory bread(block 2572) failed
23:11:31 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(0xffffffffffffffff)

23:11:31 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8035, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  402.670441] binder: 5074:5075 ioctl c0306201 200003c0 returned -22
[  402.676878] FAT-fs (loop3): Directory bread(block 2573) failed
[  402.682912] FAT-fs (loop3): Directory bread(block 2574) failed
[  402.688950] FAT-fs (loop3): Directory bread(block 2575) failed
[  402.697123] FAT-fs (loop3): Directory bread(block 2576) failed
[  402.707145] FAT-fs (loop3): Directory bread(block 2577) failed
23:11:32 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a02000f7400f801", 0x17}], 0x0, &(0x7f0000000200))

[  402.716420] binder: BINDER_SET_CONTEXT_MGR already set
[  402.721804] FAT-fs (loop3): Directory bread(block 2578) failed
[  402.728832] binder: 5074:5088 unknown command 1074324227
[  402.756778] binder: 5074:5088 ioctl c0306201 200003c0 returned -22
23:11:32 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x81000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:32 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdou\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:32 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:32 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x3000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  402.784593] binder: 5074:5075 ioctl 40046207 0 returned -16
[  402.902824] FAT-fs (loop3): Directory bread(block 2569) failed
[  402.909448] FAT-fs (loop3): Directory bread(block 2570) failed
[  402.915479] FAT-fs (loop3): Directory bread(block 2571) failed
[  402.924133] FAT-fs (loop3): Directory bread(block 2572) failed
[  402.930323] FAT-fs (loop3): Directory bread(block 2573) failed
[  402.936365] FAT-fs (loop3): Directory bread(block 2574) failed
[  402.944709] FAT-fs (loop3): Directory bread(block 2575) failed
[  402.944935] FAT-fs (loop5): bogus number of reserved sectors
[  402.954708] FAT-fs (loop3): Directory bread(block 2576) failed
[  402.957712] FAT-fs (loop5): Can't find a valid FAT filesystem
[  402.969876] FAT-fs (loop3): Directory bread(block 2577) failed
[  402.990284] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:32 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoc\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:32 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xff000000}}, 0x1c)

23:11:32 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x30, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x4, 0x2}, @acquire={0x40046305, 0x1}, @dead_binder_done, @register_looper, @acquire={0x40046305, 0x4}], 0xa1, 0x0, &(0x7f0000000040)="dc7f3414e65bbca9a84b1f91b8c5206509b9434ae615a7b5e0ddc3ab4eeaf76fccee10697f6ff435b6d65740fe166957e272f7be1c027baaa6528e10242b361f7f8c7a316144a7cb2c79a1d30efd1feadbd882a9484ed98fc9ec3d4b83ca21f4d9ee8233a03ff80afcc86a8e5d40498b04ea9f92253ec6c13fd750a067feeec6971b2b157ccdfd55b941d8fc954b68cf929936baaaca19d3fd0a68b5e54a1efa28"})

23:11:32 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xf0ffffffffffff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:32 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xffffffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:32 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0209027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:32 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(0xffffffffffffffff)

23:11:32 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:32 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0205027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:32 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x86ddffff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  403.492099] FAT-fs (loop3): bogus number of directory entries (521)
[  403.498700] FAT-fs (loop3): Can't find a valid FAT filesystem
[  403.509620] binder: tried to use weak ref as strong ref
[  403.515283] binder: 5160:5166 Release 1 refcount change on invalid ref 0 ret -22
[  403.546594] binder: 5160:5176 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4
[  403.553675] binder: 5160:5176 Acquire 1 refcount change on invalid ref 1 ret -22
[  403.561256] binder: 5160:5176 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  403.568525] binder: 5160:5176 ERROR: BC_REGISTER_LOOPER called without request
[  403.575938] binder: 5160:5176 Acquire 1 refcount change on invalid ref 4 ret -22
[  403.585918] binder: BINDER_SET_CONTEXT_MGR already set
[  403.591281] binder: 5160:5166 ioctl 40046207 0 returned -16
23:11:32 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:32 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo+\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:32 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  403.597293] binder: tried to use weak ref as strong ref
[  403.602758] binder: 5160:5176 Release 1 refcount change on invalid ref 0 ret -22
23:11:32 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x88a8ffff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:32 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000140)=""/1, 0x1}], 0x5, &(0x7f0000001740)=[{&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/40, 0x28}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000001680)=""/171, 0xab}], 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:32 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xb00, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:32 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200407400f801", 0x17}], 0x0, &(0x7f0000000200))

[  403.687998] FAT-fs (loop3): bogus number of directory entries (517)
[  403.694558] FAT-fs (loop3): Can't find a valid FAT filesystem
[  403.742938] binder: tried to use weak ref as strong ref
[  403.748395] binder: 5200:5204 Release 1 refcount change on invalid ref 0 ret -22
[  403.760148] FAT-fs (loop5): bogus number of reserved sectors
[  403.766045] FAT-fs (loop5): Can't find a valid FAT filesystem
[  403.809448] binder: BINDER_SET_CONTEXT_MGR already set
[  403.815252] binder: 5200:5204 ioctl 40046207 0 returned -16
[  403.821270] binder: tried to use weak ref as strong ref
[  403.826706] binder: 5200:5218 Release 1 refcount change on invalid ref 0 ret -22
[  403.884823] FAT-fs (loop3): Directory bread(block 2569) failed
[  403.890899] FAT-fs (loop3): Directory bread(block 2570) failed
[  403.896975] FAT-fs (loop3): Directory bread(block 2571) failed
[  403.905184] FAT-fs (loop3): Directory bread(block 2572) failed
[  403.915392] FAT-fs (loop3): Directory bread(block 2573) failed
[  403.925367] FAT-fs (loop3): Directory bread(block 2574) failed
[  403.935485] FAT-fs (loop3): Directory bread(block 2575) failed
[  403.945576] FAT-fs (loop3): Directory bread(block 2576) failed
[  403.951592] FAT-fs (loop3): Directory bread(block 2577) failed
[  403.957625] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:33 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x8050000}}, 0x1c)

23:11:33 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(0xffffffffffffffff)

23:11:33 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdosK', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:33 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x88480000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:33 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xd000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:33 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo#\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:33 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a024c027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:33 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x100000001, 0x20000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={<r2=>0x0, @in={{0x2, 0x4e22}}, 0x1, 0x7, 0x682, 0x1, 0x483d86526cd96c32}, &(0x7f0000000140)=0x98)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x8000}, &(0x7f00000002c0)=0x8)
sendfile(r1, r0, &(0x7f0000000300), 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0)
r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffffffe, 0x103000)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4)

23:11:33 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0203027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:33 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x3580, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  404.343772] FAT-fs (loop3): bogus number of directory entries (588)
[  404.350328] FAT-fs (loop3): Can't find a valid FAT filesystem
[  404.353546] binder: tried to use weak ref as strong ref
[  404.361647] binder: 5238:5245 Release 1 refcount change on invalid ref 0 ret -22
23:11:33 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8848, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:33 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73f0", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:33 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo-\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:33 executing program 7:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x30000, 0x0)
read(r0, &(0x7f0000000040)=""/58, 0x3a)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x3, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1, 0x71, 0x1, 0x8, 0xfff, 0x0, 0x0, 0x9, 0xc4f2})

[  404.412867] binder: BINDER_SET_CONTEXT_MGR already set
[  404.425709] binder: tried to use weak ref as strong ref
[  404.431307] binder: 5238:5262 Release 1 refcount change on invalid ref 0 ret -22
[  404.438692] binder: 5238:5245 ioctl 40046207 0 returned -16
23:11:33 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0260007400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:33 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xe80, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  404.513312] FAT-fs (loop3): bogus number of directory entries (515)
[  404.519816] FAT-fs (loop3): Can't find a valid FAT filesystem
[  404.566587] binder: tried to use weak ref as strong ref
[  404.572146] binder: 5282:5284 Release 1 refcount change on invalid ref 0 ret -22
[  404.594035] binder: tried to use weak ref as strong ref
[  404.596406] binder: BINDER_SET_CONTEXT_MGR already set
[  404.599513] binder: 5282:5291 Release 1 refcount change on invalid ref 0 ret -22
[  404.613112] binder: 5282:5284 ioctl 40046207 0 returned -16
[  404.696299] FAT-fs (loop3): Directory bread(block 2569) failed
[  404.706768] FAT-fs (loop3): Directory bread(block 2570) failed
[  404.713277] FAT-fs (loop3): Directory bread(block 2571) failed
[  404.719333] FAT-fs (loop3): Directory bread(block 2572) failed
[  404.728006] FAT-fs (loop3): Directory bread(block 2573) failed
[  404.738096] FAT-fs (loop3): Directory bread(block 2574) failed
23:11:34 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdop\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:34 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x20000000}}, 0x1c)

23:11:34 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x300, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:34 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f738c", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:34 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a024c027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:34 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:34 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xfdffffff00000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:34 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200207400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:34 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x2000000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  405.240721] binder: tried to use weak ref as strong ref
[  405.246192] binder: 5319:5326 Release 1 refcount change on invalid ref 0 ret -22
[  405.267967] FAT-fs (loop3): Directory bread(block 2569) failed
[  405.274057] FAT-fs (loop3): Directory bread(block 2570) failed
[  405.280099] FAT-fs (loop3): Directory bread(block 2571) failed
23:11:34 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xd00, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  405.288390] FAT-fs (loop3): Directory bread(block 2572) failed
[  405.293519] FAT-fs (loop6): bogus number of directory entries (588)
[  405.298617] FAT-fs (loop3): Directory bread(block 2573) failed
[  405.301378] FAT-fs (loop6): Can't find a valid FAT filesystem
[  405.308568] FAT-fs (loop3): Directory bread(block 2574) failed
[  405.319389] FAT-fs (loop3): Directory bread(block 2575) failed
[  405.329517] FAT-fs (loop3): Directory bread(block 2576) failed
23:11:34 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdox\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  405.339458] FAT-fs (loop3): Directory bread(block 2577) failed
[  405.349660] FAT-fs (loop3): Directory bread(block 2578) failed
[  405.366432] binder: BINDER_SET_CONTEXT_MGR already set
23:11:34 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a027a027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:34 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:34 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200207400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:34 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0663044000bc3e690000000000000000278c878d133da0d42b88c52040e6917cb0f9f9afd892c7eb9007fdad3dcfb351396d2fc0d0910f93ed1a41c04da0b8adeaedbd5807cd36a29e00e62f46202eb29ecf82"], 0x0, 0x0, &(0x7f0000000280)})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0xfffffffffffffecf)

23:11:34 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x3, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:34 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8060000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  405.405867] binder: 5319:5326 ioctl 40046207 0 returned -16
[  405.552437] FAT-fs (loop6): Directory bread(block 2569) failed
[  405.561146] binder: 5378:5382 Release 1 refcount change on invalid ref 1765719040 ret -22
[  405.563285] FAT-fs (loop6): Directory bread(block 2570) failed
[  405.569586] binder: 5378:5382 unknown command 0
[  405.575542] FAT-fs (loop6): Directory bread(block 2571) failed
[  405.587778] FAT-fs (loop3): bogus number of directory entries (634)
[  405.594271] FAT-fs (loop3): Can't find a valid FAT filesystem
[  405.594279] FAT-fs (loop6): Directory bread(block 2572) failed
[  405.594296] FAT-fs (loop6): Directory bread(block 2573) failed
[  405.612250] FAT-fs (loop6): Directory bread(block 2574) failed
[  405.631533] FAT-fs (loop6): Directory bread(block 2575) failed
[  405.641636] FAT-fs (loop6): Directory bread(block 2576) failed
[  405.651636] FAT-fs (loop6): Directory bread(block 2577) failed
[  405.658469] binder: 5378:5382 ioctl c0306201 200003c0 returned -22
[  405.664865] FAT-fs (loop6): Directory bread(block 2578) failed
[  405.677766] binder: 5378:5386 Release 1 refcount change on invalid ref 1765719040 ret -22
[  405.686167] binder: 5378:5386 unknown command 0
[  405.694595] binder: BINDER_SET_CONTEXT_MGR already set
[  405.697329] binder: 5378:5386 ioctl c0306201 200003c0 returned -22
[  405.701421] binder: 5378:5382 ioctl 40046207 0 returned -16
23:11:35 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x600000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:35 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x10000000000}}, 0x1c)

23:11:35 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0202027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:35 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
read(r0, &(0x7f0000000000)=""/168, 0xa8)

23:11:35 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo.\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:35 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:35 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xb000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:35 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200207400f801", 0x17}], 0x0, &(0x7f0000000200))

[  406.080911] FAT-fs (loop6): Directory bread(block 2569) failed
[  406.091371] FAT-fs (loop6): Directory bread(block 2570) failed
[  406.098541] binder: tried to use weak ref as strong ref
[  406.101464] FAT-fs (loop6): Directory bread(block 2571) failed
[  406.103990] binder: 5412:5422 Release 1 refcount change on invalid ref 0 ret -22
[  406.110031] FAT-fs (loop6): Directory bread(block 2572) failed
[  406.117527] FAT-fs (loop3): bogus number of directory entries (514)
23:11:35 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xe02, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:35 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xfdffffff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  406.128533] FAT-fs (loop6): Directory bread(block 2573) failed
[  406.129920] FAT-fs (loop3): Can't find a valid FAT filesystem
[  406.141985] FAT-fs (loop6): Directory bread(block 2574) failed
[  406.161963] FAT-fs (loop6): Directory bread(block 2575) failed
[  406.172051] FAT-fs (loop6): Directory bread(block 2576) failed
23:11:35 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a02eb027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:35 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f737f", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:35 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10)

[  406.177621] binder: BINDER_SET_CONTEXT_MGR already set
[  406.183414] FAT-fs (loop6): Directory bread(block 2577) failed
[  406.192303] FAT-fs (loop6): Directory bread(block 2578) failed
[  406.195686] binder: tried to use weak ref as strong ref
[  406.203772] binder: 5412:5432 Release 1 refcount change on invalid ref 0 ret -22
[  406.215790] binder: 5412:5422 ioctl 40046207 0 returned -16
23:11:35 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:35 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8864, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:35 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x6000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:35 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0209027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  406.313466] binder: tried to use weak ref as strong ref
[  406.318928] binder: 5451:5455 Release 1 refcount change on invalid ref 0 ret -22
[  406.331295] binder: BINDER_SET_CONTEXT_MGR already set
[  406.337387] binder: tried to use weak ref as strong ref
[  406.342828] binder: 5451:5458 Release 1 refcount change on invalid ref 0 ret -22
[  406.347131] binder: 5451:5455 ioctl 40046207 0 returned -16
[  406.373562] FAT-fs (loop3): bogus number of directory entries (747)
[  406.380074] FAT-fs (loop3): Can't find a valid FAT filesystem
[  406.460748] FAT-fs (loop6): bogus number of directory entries (521)
[  406.467235] FAT-fs (loop6): Can't find a valid FAT filesystem
[  406.491763] FAT-fs (loop5): bogus number of reserved sectors
[  406.497755] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:36 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x800000000000000}}, 0x1c)

23:11:36 executing program 7:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24001, 0x0)
r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0)
syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000340)={<r2=>r1})
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7ff, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000240)={{0x7, 0x6}, {0x4, 0xfff}, 0x9, 0x4, 0x7})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r2})
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
accept4$nfc_llcp(r0, 0x0, &(0x7f00000002c0), 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x0, 0x8, 0x7, 0x2, 0x33f1, 0xda6, 0x2, <r4=>0x0}, &(0x7f0000000140)=0x20)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="2891268ac5d65d08000a010900090000100080700807009e"], &(0x7f0000000200)=0x1c)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000000080000000000000000"], 0x0, 0x0, &(0x7f0000000280)})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xffffffffffff89ef)

23:11:36 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0206027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x608, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:36 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x1000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:36 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdo\n\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  406.930966] FAT-fs (loop0): Directory bread(block 2569) failed
[  406.937064] FAT-fs (loop0): Directory bread(block 2570) failed
[  406.943097] FAT-fs (loop0): Directory bread(block 2571) failed
[  406.951652] FAT-fs (loop0): Directory bread(block 2572) failed
[  406.952798] FAT-fs (loop3): bogus number of directory entries (518)
[  406.961775] FAT-fs (loop0): Directory bread(block 2573) failed
[  406.964117] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:36 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xa000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  406.976162] FAT-fs (loop0): Directory bread(block 2574) failed
[  406.992789] FAT-fs (loop5): bogus number of reserved sectors
[  406.995966] FAT-fs (loop0): Directory bread(block 2575) failed
[  406.998638] FAT-fs (loop5): Can't find a valid FAT filesystem
[  406.999384] binder: 5497:5501 IncRefs 0 refcount change on invalid ref 134217728 ret -22
[  407.006060] FAT-fs (loop0): Directory bread(block 2576) failed
[  407.010694] binder: 5497:5501 unknown command 0
23:11:36 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200147400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xffffa888, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  407.018940] FAT-fs (loop0): Directory bread(block 2577) failed
[  407.042148] FAT-fs (loop0): Directory bread(block 2578) failed
[  407.057586] binder: 5497:5501 ioctl c0306201 200003c0 returned -22
[  407.071845] binder: BINDER_SET_CONTEXT_MGR already set
23:11:36 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7302", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msd\ns\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73a5", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  407.091673] binder: 5497:5518 ioctl 40046207 0 returned -16
[  407.113585] binder: 5497:5527 IncRefs 0 refcount change on invalid ref 134217728 ret -22
[  407.121899] binder: 5497:5527 unknown command 0
23:11:36 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8847, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:36 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  407.154693] binder: 5497:5527 ioctl c0306201 200003c0 returned -22
[  407.176856] FAT-fs (loop3): Directory bread(block 2569) failed
[  407.183100] FAT-fs (loop3): Directory bread(block 2570) failed
[  407.189137] FAT-fs (loop3): Directory bread(block 2571) failed
[  407.197604] FAT-fs (loop3): Directory bread(block 2572) failed
[  407.207632] FAT-fs (loop3): Directory bread(block 2573) failed
[  407.217718] FAT-fs (loop3): Directory bread(block 2574) failed
[  407.227824] FAT-fs (loop3): Directory bread(block 2575) failed
[  407.237974] FAT-fs (loop3): Directory bread(block 2576) failed
[  407.248140] FAT-fs (loop3): Directory bread(block 2577) failed
[  407.258539] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:36 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x6000000}}, 0x1c)

23:11:36 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0463f9615a2300000663044000000000"], 0x0, 0x0, &(0x7f0000000280)})

23:11:36 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a02000a7400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7311", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0400027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:36 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x20e, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:36 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xfffffffe, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:36 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:37 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xa00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  407.770881] binder: 5573:5574 unknown command 1643733764
[  407.777341] FAT-fs (loop6): Directory bread(block 2571) failed
[  407.783398] FAT-fs (loop6): Directory bread(block 2572) failed
[  407.789441] FAT-fs (loop6): Directory bread(block 2573) failed
[  407.790153] binder: 5573:5574 ioctl c0306201 200003c0 returned -22
[  407.797922] FAT-fs (loop6): Directory bread(block 2574) failed
[  407.808012] FAT-fs (loop6): Directory bread(block 2575) failed
[  407.809106] binder: BINDER_SET_CONTEXT_MGR already set
[  407.814571] FAT-fs (loop6): Directory bread(block 2576) failed
[  407.828138] binder: 5573:5590 unknown command 1643733764
[  407.833550] FAT-fs (loop5): bogus number of reserved sectors
[  407.833668] FAT-fs (loop6): Directory bread(block 2577) failed
[  407.839544] FAT-fs (loop5): Can't find a valid FAT filesystem
[  407.845874] binder: 5573:5590 ioctl c0306201 200003c0 returned -22
[  407.857737] FAT-fs (loop6): Directory bread(block 2578) failed
[  407.863751] FAT-fs (loop6): Directory bread(block 2579) failed
23:11:37 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:37 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})

23:11:37 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x300000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  407.871893] binder: 5573:5574 ioctl 40046207 0 returned -16
[  407.878052] FAT-fs (loop6): Directory bread(block 2580) failed
23:11:37 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x88480000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:37 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\f', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:37 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  407.927646] FAT-fs (loop3): Directory bread(block 2569) failed
[  407.934294] FAT-fs (loop3): Directory bread(block 2570) failed
[  407.942156] FAT-fs (loop3): Directory bread(block 2571) failed
[  407.982725] FAT-fs (loop3): Directory bread(block 2572) failed
[  407.995862] FAT-fs (loop3): Directory bread(block 2573) failed
[  408.003238] FAT-fs (loop3): Directory bread(block 2574) failed
[  408.009840] FAT-fs (loop3): Directory bread(block 2575) failed
[  408.017254] FAT-fs (loop3): Directory bread(block 2576) failed
[  408.023791] FAT-fs (loop3): Directory bread(block 2577) failed
23:11:37 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020c027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  408.030575] FAT-fs (loop5): bogus number of reserved sectors
[  408.036501] FAT-fs (loop5): Can't find a valid FAT filesystem
[  408.042715] FAT-fs (loop3): Directory bread(block 2578) failed
[  408.067481] binder: tried to use weak ref as strong ref
[  408.072968] binder: 5612:5617 Release 1 refcount change on invalid ref 0 ret -22
[  408.095111] binder: BINDER_SET_CONTEXT_MGR already set
[  408.100769] binder: tried to use weak ref as strong ref
[  408.106217] binder: 5612:5626 Release 1 refcount change on invalid ref 0 ret -22
[  408.115416] binder: 5612:5617 ioctl 40046207 0 returned -16
[  408.115659] FAT-fs (loop6): bogus number of reserved sectors
[  408.126996] FAT-fs (loop6): Can't find a valid FAT filesystem
[  408.233031] FAT-fs (loop3): bogus number of directory entries (524)
[  408.239525] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:37 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xa}}, 0x1c)

23:11:37 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x7000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:37 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x6000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:37 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:37 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x12480, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r2, 0x3}}, 0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)

23:11:37 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:37 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407250200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:37 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0260027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  408.743768] FAT-fs (loop0): Directory bread(block 2569) failed
[  408.750022] FAT-fs (loop0): Directory bread(block 2570) failed
[  408.756061] FAT-fs (loop0): Directory bread(block 2571) failed
[  408.764673] FAT-fs (loop0): Directory bread(block 2572) failed
[  408.770332] binder: tried to use weak ref as strong ref
[  408.774760] FAT-fs (loop0): Directory bread(block 2573) failed
[  408.776210] binder: 5657:5661 Release 1 refcount change on invalid ref 0 ret -22
[  408.784850] FAT-fs (loop0): Directory bread(block 2574) failed
[  408.795796] FAT-fs (loop0): Directory bread(block 2575) failed
[  408.803032] FAT-fs (loop5): bogus number of reserved sectors
[  408.803146] FAT-fs (loop3): Directory bread(block 2569) failed
[  408.808937] FAT-fs (loop5): Can't find a valid FAT filesystem
[  408.809166] FAT-fs (loop0): Directory bread(block 2576) failed
[  408.814980] FAT-fs (loop3): Directory bread(block 2570) failed
[  408.823271] binder: BINDER_SET_CONTEXT_MGR already set
[  408.832997] FAT-fs (loop3): Directory bread(block 2571) failed
[  408.838244] FAT-fs (loop0): Directory bread(block 2577) failed
[  408.838262] FAT-fs (loop0): Directory bread(block 2578) failed
[  408.851967] FAT-fs (loop3): Directory bread(block 2572) failed
[  408.857285] binder: tried to use weak ref as strong ref
[  408.867829] binder: 5657:5679 Release 1 refcount change on invalid ref 0 ret -22
[  408.869209] FAT-fs (loop3): Directory bread(block 2573) failed
23:11:38 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xd00, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:38 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:38 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ad", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:38 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x88640000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  408.889934] FAT-fs (loop3): Directory bread(block 2574) failed
[  408.899940] FAT-fs (loop3): Directory bread(block 2575) failed
[  408.910231] FAT-fs (loop3): Directory bread(block 2576) failed
[  408.920267] FAT-fs (loop3): Directory bread(block 2577) failed
[  408.930529] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:38 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020407250200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:38 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200747400f801", 0x17}], 0x0, &(0x7f0000000200))

[  408.974825] binder: 5657:5661 ioctl 40046207 0 returned -16
23:11:38 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8906, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  409.026763] FAT-fs (loop0): Directory bread(block 2569) failed
[  409.032853] FAT-fs (loop0): Directory bread(block 2570) failed
[  409.038925] FAT-fs (loop0): Directory bread(block 2571) failed
[  409.047178] FAT-fs (loop0): Directory bread(block 2572) failed
[  409.057334] FAT-fs (loop0): Directory bread(block 2573) failed
[  409.067425] FAT-fs (loop0): Directory bread(block 2574) failed
23:11:38 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r2=>0x0, 0x6}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000140)=0x8)

[  409.077585] FAT-fs (loop0): Directory bread(block 2575) failed
[  409.087742] FAT-fs (loop0): Directory bread(block 2576) failed
[  409.097773] FAT-fs (loop0): Directory bread(block 2577) failed
[  409.108035] FAT-fs (loop0): Directory bread(block 2578) failed
[  409.115432] FAT-fs (loop6): Directory bread(block 9481) failed
23:11:38 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  409.125650] FAT-fs (loop6): Directory bread(block 9482) failed
[  409.127261] FAT-fs (loop3): Directory bread(block 2569) failed
[  409.131746] FAT-fs (loop6): Directory bread(block 9483) failed
[  409.141632] FAT-fs (loop3): Directory bread(block 2570) failed
[  409.145900] FAT-fs (loop6): Directory bread(block 9484) failed
[  409.162428] FAT-fs (loop6): Directory bread(block 9485) failed
[  409.168007] FAT-fs (loop3): Directory bread(block 2571) failed
[  409.172618] FAT-fs (loop6): Directory bread(block 9486) failed
[  409.182823] FAT-fs (loop6): Directory bread(block 9487) failed
[  409.189169] FAT-fs (loop6): Directory bread(block 9488) failed
[  409.195996] FAT-fs (loop6): Directory bread(block 9489) failed
[  409.205559] FAT-fs (loop3): Directory bread(block 2572) failed
[  409.211663] FAT-fs (loop6): Directory bread(block 9490) failed
[  409.219676] FAT-fs (loop3): Directory bread(block 2573) failed
[  409.237478] FAT-fs (loop3): Directory bread(block 2574) failed
[  409.254413] FAT-fs (loop3): Directory bread(block 2575) failed
[  409.268169] FAT-fs (loop3): Directory bread(block 2576) failed
[  409.274815] binder: 5718:5723 IncRefs 0 refcount change on invalid ref 0 ret -22
[  409.282450] binder: 5718:5723 Release 1 refcount change on invalid ref 0 ret -22
[  409.291304] FAT-fs (loop3): Directory bread(block 2577) failed
[  409.298696] FAT-fs (loop3): Directory bread(block 2578) failed
[  409.327916] FAT-fs (loop5): bogus number of reserved sectors
[  409.333840] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:38 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c)

23:11:38 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='mpdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:38 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0274027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:38 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:38 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:38 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syncfs(r0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630400002000000000004000000000"], 0x0, 0x0, &(0x7f0000000280)})

23:11:38 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xfffffffffffff000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:38 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x4788, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  409.615140] FAT-fs (loop0): Directory bread(block 2569) failed
[  409.616569] FAT-fs (loop3): bogus number of directory entries (628)
[  409.621230] FAT-fs (loop0): Directory bread(block 2570) failed
[  409.627619] FAT-fs (loop3): Can't find a valid FAT filesystem
[  409.646264] FAT-fs (loop0): Directory bread(block 2571) failed
[  409.656210] FAT-fs (loop0): Directory bread(block 2572) failed
23:11:38 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x222, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:38 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0223027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:38 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x4305, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  409.662648] binder: 5747:5758 unknown command 287492
[  409.667909] FAT-fs (loop0): Directory bread(block 2573) failed
[  409.676719] FAT-fs (loop0): Directory bread(block 2574) failed
[  409.687008] FAT-fs (loop0): Directory bread(block 2575) failed
[  409.693675] binder: 5747:5758 ioctl c0306201 200003c0 returned -22
[  409.700178] FAT-fs (loop0): Directory bread(block 2576) failed
[  409.707182] FAT-fs (loop0): Directory bread(block 2577) failed
23:11:38 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200747400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:38 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7304", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  409.717778] FAT-fs (loop0): Directory bread(block 2578) failed
[  409.729307] binder: BINDER_SET_CONTEXT_MGR already set
[  409.734920] binder: 5747:5763 ioctl 40046207 0 returned -16
23:11:39 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8060000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:39 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @release], 0x0, 0x0, &(0x7f0000000280)})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00')
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

[  409.808836] FAT-fs (loop6): Directory bread(block 2569) failed
[  409.814946] FAT-fs (loop6): Directory bread(block 2570) failed
[  409.820984] FAT-fs (loop6): Directory bread(block 2571) failed
[  409.829279] FAT-fs (loop6): Directory bread(block 2572) failed
[  409.839469] FAT-fs (loop6): Directory bread(block 2573) failed
[  409.849599] FAT-fs (loop6): Directory bread(block 2574) failed
23:11:39 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xb00, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  409.855668] FAT-fs (loop6): Directory bread(block 2575) failed
[  409.861771] FAT-fs (loop6): Directory bread(block 2576) failed
[  409.869844] FAT-fs (loop6): Directory bread(block 2577) failed
[  409.880507] FAT-fs (loop6): Directory bread(block 2578) failed
[  409.954510] binder: tried to use weak ref as strong ref
[  409.959964] binder: 5804:5806 Release 1 refcount change on invalid ref 0 ret -22
[  409.984458] binder: tried to use weak ref as strong ref
[  409.989910] binder: 5804:5810 Release 1 refcount change on invalid ref 0 ret -22
[  409.997766] binder: BINDER_SET_CONTEXT_MGR already set
[  410.033390] binder: 5804:5806 ioctl 40046207 0 returned -16
23:11:39 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xbb317eae}}, 0x1c)

23:11:39 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0293027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:39 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:39 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x200000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:39 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204100a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:39 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x600, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:39 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7306", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:39 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x1c, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESHEX=r0], @ANYRESHEX=0x0], 0x0, 0x0, &(0x7f0000000280)})

23:11:39 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x1c00000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:39 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200427400f801", 0x17}], 0x0, &(0x7f0000000200))

[  410.471616] binder: 5825:5829 unknown command 25165843
[  410.477830] FAT-fs (loop3): bogus number of directory entries (659)
[  410.478651] binder: 5825:5829 ioctl c0306201 20000140 returned -22
[  410.484372] FAT-fs (loop3): Can't find a valid FAT filesystem
23:11:39 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos ', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  410.527736] binder: BINDER_SET_CONTEXT_MGR already set
[  410.545453] binder: 5825:5849 unknown command 25165844
[  410.552314] binder: 5825:5829 ioctl 40046207 0 returned -16
[  410.561078] binder: 5825:5849 ioctl c0306201 20000140 returned -22
[  410.571553] FAT-fs (loop5): bogus number of reserved sectors
23:11:39 executing program 6:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204100a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:39 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x800e, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  410.577425] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:39 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xfffff000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:39 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7393", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:39 executing program 7:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  410.683649] FAT-fs (loop6): Directory bread(block 2578) failed
[  410.689745] FAT-fs (loop6): Directory bread(block 2579) failed
[  410.695767] FAT-fs (loop6): Directory bread(block 2580) failed
[  410.704386] FAT-fs (loop6): Directory bread(block 2581) failed
[  410.714434] FAT-fs (loop6): Directory bread(block 2582) failed
[  410.724478] FAT-fs (loop6): Directory bread(block 2583) failed
[  410.735026] FAT-fs (loop6): Directory bread(block 2584) failed
[  410.741182] FAT-fs (loop6): Directory bread(block 2585) failed
[  410.747205] FAT-fs (loop6): Directory bread(block 2586) failed
[  410.755481] FAT-fs (loop6): Directory bread(block 2587) failed
[  410.806626] FAT-fs (loop7): bogus number of reserved sectors
[  410.812644] FAT-fs (loop7): Can't find a valid FAT filesystem
23:11:40 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfffffff5}}, 0x1c)

23:11:40 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:40 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200107400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:40 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xe02000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:40 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xfeffffff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:40 executing program 6 (fault-call:9 fault-nth:0):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

23:11:40 executing program 7:
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3bc6)
r0 = socket(0x1e, 0x2, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000240)={{0x8, 0x5}, 'port1\x00', 0x42, 0x400, 0x8, 0xff, 0x400, 0x3, 0x9, 0x0, 0x2, 0x8})
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={<r2=>0x0, 0x80000000, 0x30}, &(0x7f0000000600)=0xc)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0x11, "1bf39ee85e9c9440617813303573ec6d18"}, &(0x7f0000000300)=0x19)
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x100)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x50000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x0)
sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c0}}, 0x4801)
sendmsg(r0, &(0x7f0000316000)={&(0x7f0000002300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00002d4000)}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1000001, 0x1)

23:11:40 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7396", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  411.334727] FAT-fs (loop0): Directory bread(block 2569) failed
[  411.340855] FAT-fs (loop0): Directory bread(block 2570) failed
[  411.346884] FAT-fs (loop0): Directory bread(block 2571) failed
[  411.355167] FAT-fs (loop0): Directory bread(block 2572) failed
[  411.364457] FAT-fs (loop3): Directory bread(block 2569) failed
[  411.365240] FAT-fs (loop0): Directory bread(block 2573) failed
[  411.374774] FAT-fs (loop3): Directory bread(block 2570) failed
23:11:40 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x14, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  411.382544] FAT-fs (loop3): Directory bread(block 2571) failed
[  411.384175] FAT-fs (loop0): Directory bread(block 2574) failed
[  411.388560] FAT-fs (loop3): Directory bread(block 2572) failed
[  411.388581] FAT-fs (loop3): Directory bread(block 2573) failed
[  411.401566] FAT-fs (loop0): Directory bread(block 2575) failed
[  411.407997] FAT-fs (loop3): Directory bread(block 2574) failed
[  411.420051] FAT-fs (loop0): Directory bread(block 2576) failed
[  411.428055] FAT-fs (loop3): Directory bread(block 2575) failed
23:11:40 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  411.430204] FAT-fs (loop0): Directory bread(block 2577) failed
[  411.436079] FAT-fs (loop3): Directory bread(block 2576) failed
[  411.440206] FAT-fs (loop0): Directory bread(block 2578) failed
[  411.453043] FAT-fs (loop3): Directory bread(block 2577) failed
[  411.463112] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:40 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xfffff000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:40 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200747400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:40 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x89060000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:40 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7387", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:40 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xd000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  411.580327] FAT-fs (loop0): Directory bread(block 2569) failed
[  411.586419] FAT-fs (loop0): Directory bread(block 2570) failed
[  411.592461] FAT-fs (loop0): Directory bread(block 2571) failed
[  411.600933] FAT-fs (loop0): Directory bread(block 2572) failed
[  411.611035] FAT-fs (loop0): Directory bread(block 2573) failed
[  411.621184] FAT-fs (loop0): Directory bread(block 2574) failed
23:11:40 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
close(r1)

[  411.631410] FAT-fs (loop0): Directory bread(block 2575) failed
[  411.642970] FAT-fs (loop3): Directory bread(block 2569) failed
[  411.649039] FAT-fs (loop3): Directory bread(block 2570) failed
[  411.651643] FAT-fs (loop0): Directory bread(block 2576) failed
[  411.655077] FAT-fs (loop3): Directory bread(block 2571) failed
[  411.661056] FAT-fs (loop0): Directory bread(block 2577) failed
[  411.673809] FAT-fs (loop3): Directory bread(block 2572) failed
[  411.677467] FAT-fs (loop0): Directory bread(block 2578) failed
[  411.683437] FAT-fs (loop3): Directory bread(block 2573) failed
[  411.693600] FAT-fs (loop3): Directory bread(block 2574) failed
[  411.699679] FAT-fs (loop3): Directory bread(block 2575) failed
[  411.707897] FAT-fs (loop3): Directory bread(block 2576) failed
[  411.717910] FAT-fs (loop3): Directory bread(block 2577) failed
[  411.728264] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:41 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x89060000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:41 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x8}}, 0x1c)

23:11:41 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdost', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:41 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x30000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:41 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:41 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200047400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:41 executing program 7:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x84)
write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfd87)
fallocate(r0, 0x0, 0x0, 0x2008)
fallocate(r0, 0x3, 0x5e00, 0x2cbd)
sync_file_range(r0, 0x2002, 0x0, 0x2)

23:11:41 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0x200102ce, 0x0, 0x0, 0x307)
close(r1)

23:11:41 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x6000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  412.196642] FAT-fs (loop3): Directory bread(block 2569) failed
[  412.202730] FAT-fs (loop3): Directory bread(block 2570) failed
[  412.208753] FAT-fs (loop3): Directory bread(block 2571) failed
[  412.217695] FAT-fs (loop3): Directory bread(block 2572) failed
[  412.227111] FAT-fs (loop3): Directory bread(block 2573) failed
[  412.237555] FAT-fs (loop3): Directory bread(block 2574) failed
23:11:41 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x80350000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:41 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f730e", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:41 executing program 7:
clock_getres(0xffffffffbfffffff, &(0x7f0000000040))
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x2b, @local, 0x4e20, 0x4, 'sh\x00', 0x8, 0x3ff, 0x7c}, 0x2c)

[  412.248297] FAT-fs (loop3): Directory bread(block 2575) failed
[  412.257788] FAT-fs (loop3): Directory bread(block 2576) failed
[  412.267935] FAT-fs (loop3): Directory bread(block 2577) failed
[  412.278168] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:41 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a02000a7400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:41 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:41 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x806, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:41 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:41 executing program 7:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x400)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x2000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100))
write$9p(r0, &(0x7f0000000c80)="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", 0x1000)
ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
recvmmsg(r3, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680})

[  412.462008] FAT-fs (loop3): Directory bread(block 2569) failed
[  412.468198] FAT-fs (loop3): Directory bread(block 2570) failed
[  412.482980] FAT-fs (loop3): Directory bread(block 2571) failed
[  412.489154] FAT-fs (loop3): Directory bread(block 2572) failed
[  412.495323] FAT-fs (loop3): Directory bread(block 2573) failed
[  412.503428] FAT-fs (loop3): Directory bread(block 2574) failed
[  412.512152] FAT-fs (loop5): bogus number of reserved sectors
[  412.513776] FAT-fs (loop3): Directory bread(block 2575) failed
[  412.518002] FAT-fs (loop5): Can't find a valid FAT filesystem
[  412.530999] FAT-fs (loop3): Directory bread(block 2576) failed
[  412.540920] FAT-fs (loop3): Directory bread(block 2577) failed
[  412.551120] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:42 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x4000000000000000}}, 0x1c)

23:11:42 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x88caffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:42 executing program 7:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106}}, 0xfffffffffffffe32)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x3)
ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f00000000c0)={0x3ff, 0x5d9c, 0x9})
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r0}}, 0x18)

23:11:42 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:42 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x543, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:42 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x34000000, 0x0, 0x307)
close(r1)

23:11:42 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:42 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a02000f7400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:42 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8847000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  413.095409] FAT-fs (loop3): Directory bread(block 2569) failed
[  413.105845] FAT-fs (loop3): Directory bread(block 2570) failed
[  413.107305] FAT-fs (loop0): Directory bread(block 2569) failed
[  413.111940] FAT-fs (loop3): Directory bread(block 2571) failed
[  413.117944] FAT-fs (loop0): Directory bread(block 2570) failed
[  413.126159] FAT-fs (loop3): Directory bread(block 2572) failed
[  413.135393] FAT-fs (loop0): Directory bread(block 2571) failed
[  413.136183] FAT-fs (loop3): Directory bread(block 2573) failed
[  413.145438] FAT-fs (loop0): Directory bread(block 2572) failed
[  413.152043] FAT-fs (loop3): Directory bread(block 2574) failed
[  413.153959] FAT-fs (loop0): Directory bread(block 2573) failed
[  413.162081] FAT-fs (loop3): Directory bread(block 2575) failed
[  413.170615] FAT-fs (loop0): Directory bread(block 2574) failed
[  413.172032] FAT-fs (loop3): Directory bread(block 2576) failed
[  413.180659] FAT-fs (loop0): Directory bread(block 2575) failed
[  413.190016] FAT-fs (loop0): Directory bread(block 2576) failed
23:11:42 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x800e0000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:42 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = inotify_init1(0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x9e, "a466b0f1494acbbf8ae66260b4b6cf2b82e52f5f15f6a67f08e2e2709db36935b99f8ed0ca29013ddfc9058073138844fe3fa5f2cf119e4b5d8b8fbb66319950926960ea30928d7998580bfa51346f4a59cdc0d0ff20788f1054833a5a046d2eb855349f59e46bc68ac8b185e0ccfacfc3dbe59698a09dc5a5d4965d6dbd7361f57b4b52e279e922655743ce513303304ece92abc0463bd83eb4313df10b"})
fcntl$getownex(r1, 0x10, &(0x7f000045fff8))

23:11:42 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  413.191720] FAT-fs (loop3): Directory bread(block 2577) failed
[  413.198341] FAT-fs (loop0): Directory bread(block 2577) failed
[  413.208546] FAT-fs (loop0): Directory bread(block 2578) failed
[  413.209208] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:42 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:42 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x86ddffff00000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:42 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200037400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:42 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x300, 0x0, 0x307)
close(r1)

[  413.404024] FAT-fs (loop0): Directory bread(block 2569) failed
[  413.414360] FAT-fs (loop0): Directory bread(block 2570) failed
[  413.420448] FAT-fs (loop0): Directory bread(block 2571) failed
[  413.428837] FAT-fs (loop5): bogus number of reserved sectors
[  413.434970] FAT-fs (loop5): Can't find a valid FAT filesystem
[  413.435391] FAT-fs (loop0): Directory bread(block 2572) failed
[  413.447073] FAT-fs (loop0): Directory bread(block 2573) failed
[  413.447223] FAT-fs (loop3): Directory bread(block 2569) failed
[  413.459079] FAT-fs (loop0): Directory bread(block 2574) failed
[  413.459098] FAT-fs (loop0): Directory bread(block 2575) failed
[  413.467206] FAT-fs (loop3): Directory bread(block 2570) failed
[  413.475165] FAT-fs (loop0): Directory bread(block 2576) failed
[  413.477241] FAT-fs (loop3): Directory bread(block 2571) failed
[  413.485415] FAT-fs (loop0): Directory bread(block 2577) failed
[  413.493456] FAT-fs (loop3): Directory bread(block 2572) failed
[  413.495046] FAT-fs (loop0): Directory bread(block 2578) failed
[  413.507332] FAT-fs (loop3): Directory bread(block 2573) failed
[  413.527697] FAT-fs (loop3): Directory bread(block 2574) failed
[  413.538116] FAT-fs (loop3): Directory bread(block 2575) failed
[  413.548092] FAT-fs (loop3): Directory bread(block 2576) failed
[  413.568781] FAT-fs (loop3): Directory bread(block 2577) failed
[  413.574925] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:43 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x4000}}, 0x1c)

23:11:43 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x1400, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:43 executing program 7:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000000000000f3ffffff018000007a0a00fffffffffd630108"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1000000012, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000400)='syzkaller\x00', 0x84000001, 0x2b3, &(0x7f0000000300)=""/187, 0x0, 0x0, [], 0x0, 0x800000000000000b}, 0x11f)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400040, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @loopback, 0x1, 0x8, [@local, @broadcast, @broadcast, @remote, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1]}, 0x30)

23:11:43 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xb00000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:43 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:43 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:43 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200147400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:43 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8035, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  413.932268] FAT-fs (loop0): Directory bread(block 2569) failed
[  413.938397] FAT-fs (loop0): Directory bread(block 2570) failed
[  413.942743] FAT-fs (loop3): Directory bread(block 2569) failed
[  413.944411] FAT-fs (loop0): Directory bread(block 2571) failed
[  413.950398] FAT-fs (loop3): Directory bread(block 2570) failed
[  413.950413] FAT-fs (loop3): Directory bread(block 2571) failed
[  413.962797] FAT-fs (loop0): Directory bread(block 2572) failed
[  413.975779] FAT-fs (loop3): Directory bread(block 2572) failed
[  413.982198] FAT-fs (loop0): Directory bread(block 2573) failed
[  413.985826] FAT-fs (loop3): Directory bread(block 2573) failed
[  413.994285] FAT-fs (loop0): Directory bread(block 2574) failed
[  413.995858] FAT-fs (loop3): Directory bread(block 2574) failed
[  414.006294] FAT-fs (loop0): Directory bread(block 2575) failed
[  414.007302] FAT-fs (loop3): Directory bread(block 2575) failed
[  414.012381] FAT-fs (loop0): Directory bread(block 2576) failed
[  414.025748] FAT-fs (loop3): Directory bread(block 2576) failed
23:11:43 executing program 7:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200037400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:43 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x4305000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:43 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  414.033857] FAT-fs (loop0): Directory bread(block 2577) failed
[  414.035760] FAT-fs (loop3): Directory bread(block 2577) failed
[  414.043762] FAT-fs (loop0): Directory bread(block 2578) failed
[  414.053085] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:43 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x508}}, 0x1c)

23:11:43 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020d0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:43 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73f6", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  414.082268] FAT-fs (loop5): bogus number of reserved sectors
[  414.088160] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:43 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xe80, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  414.143431] FAT-fs (loop7): Directory bread(block 2569) failed
[  414.153888] FAT-fs (loop7): Directory bread(block 2570) failed
[  414.159965] FAT-fs (loop7): Directory bread(block 2571) failed
[  414.166027] FAT-fs (loop7): Directory bread(block 2572) failed
[  414.174013] FAT-fs (loop7): Directory bread(block 2573) failed
[  414.184169] FAT-fs (loop7): Directory bread(block 2574) failed
[  414.194187] FAT-fs (loop7): Directory bread(block 2575) failed
[  414.204342] FAT-fs (loop7): Directory bread(block 2576) failed
[  414.205991] FAT-fs (loop0): Directory bread(block 2569) failed
[  414.214385] FAT-fs (loop7): Directory bread(block 2577) failed
[  414.216430] FAT-fs (loop0): Directory bread(block 2570) failed
[  414.216445] FAT-fs (loop0): Directory bread(block 2571) failed
[  414.216458] FAT-fs (loop0): Directory bread(block 2572) failed
23:11:43 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xe00, 0x0, 0x307)
close(r1)

23:11:43 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8100000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:43 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
tee(r0, r0, 0xffffffffffff8000, 0x3)
ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070")
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0x8000000000000, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x0, @broadcast, 'gre0\x00'})

[  414.216478] FAT-fs (loop0): Directory bread(block 2573) failed
[  414.224528] FAT-fs (loop7): Directory bread(block 2578) failed
[  414.228631] FAT-fs (loop0): Directory bread(block 2574) failed
[  414.258548] FAT-fs (loop0): Directory bread(block 2575) failed
[  414.298675] FAT-fs (loop0): Directory bread(block 2576) failed
[  414.308624] FAT-fs (loop0): Directory bread(block 2577) failed
[  414.318778] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:43 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:43 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8906000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  414.360372] FAT-fs (loop3): Directory bread(block 2569) failed
[  414.366467] FAT-fs (loop3): Directory bread(block 2570) failed
[  414.380961] FAT-fs (loop3): Directory bread(block 2571) failed
[  414.387153] FAT-fs (loop3): Directory bread(block 2572) failed
[  414.393193] FAT-fs (loop3): Directory bread(block 2573) failed
[  414.401710] FAT-fs (loop3): Directory bread(block 2574) failed
23:11:43 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x800e000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:43 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020e0af801", 0x17}], 0x0, &(0x7f0000000200))

[  414.411620] FAT-fs (loop3): Directory bread(block 2575) failed
[  414.421807] FAT-fs (loop3): Directory bread(block 2576) failed
[  414.423289] FAT-fs (loop7): bogus number of reserved sectors
[  414.431871] FAT-fs (loop3): Directory bread(block 2577) failed
[  414.433752] FAT-fs (loop7): Can't find a valid FAT filesystem
[  414.442105] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:43 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos&', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:43 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xd00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  414.532963] FAT-fs (loop7): bogus number of reserved sectors
[  414.538873] FAT-fs (loop7): Can't find a valid FAT filesystem
23:11:43 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0xfffffffffffffffc, 0x41004})
ioctl$KVM_NMI(r2, 0xae9a)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="1e563a000ff822"], 0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:11:43 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:43 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x800e000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  414.592453] FAT-fs (loop0): Directory bread(block 2569) failed
[  414.602709] FAT-fs (loop0): Directory bread(block 2570) failed
[  414.608814] FAT-fs (loop0): Directory bread(block 2571) failed
[  414.614818] FAT-fs (loop0): Directory bread(block 2572) failed
[  414.623002] FAT-fs (loop0): Directory bread(block 2573) failed
[  414.633112] FAT-fs (loop0): Directory bread(block 2574) failed
[  414.643126] FAT-fs (loop0): Directory bread(block 2575) failed
[  414.654242] FAT-fs (loop3): Directory bread(block 2569) failed
[  414.663272] FAT-fs (loop0): Directory bread(block 2576) failed
[  414.664545] FAT-fs (loop3): Directory bread(block 2570) failed
[  414.669370] FAT-fs (loop0): Directory bread(block 2577) failed
[  414.675342] FAT-fs (loop3): Directory bread(block 2571) failed
[  414.684084] FAT-fs (loop0): Directory bread(block 2578) failed
[  414.692637] FAT-fs (loop3): Directory bread(block 2572) failed
[  414.702721] FAT-fs (loop3): Directory bread(block 2573) failed
[  414.714485] FAT-fs (loop3): Directory bread(block 2574) failed
[  414.724325] FAT-fs (loop3): Directory bread(block 2575) failed
[  414.730422] FAT-fs (loop3): Directory bread(block 2576) failed
[  414.736486] FAT-fs (loop3): Directory bread(block 2577) failed
[  414.745056] FAT-fs (loop3): Directory bread(block 2578) failed
[  414.772310] *** Guest State ***
[  414.775660] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  414.784539] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  414.793528] CR3 = 0x0000000000000000
[  414.797267] RSP = 0x0000000000000006  RIP = 0xfffffffffffffffc
[  414.803253] RFLAGS=0x00041006         DR7 = 0x0000000000000400
[  414.809373] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  414.816116] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  414.824123] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  414.832132] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  414.840136] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  414.848144] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  414.856123] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  414.864105] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  414.872086] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  414.880061] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  414.888050] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  414.896037] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  414.902444] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  414.909907] Interruptibility = 00000000  ActivityState = 00000000
[  414.916146] *** Host State ***
[  414.919350] RIP = 0xffffffff811f4814  RSP = 0xffff88018bf27350
[  414.925330] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  414.931761] FSBase=00007fa57c0b6700 GSBase=ffff8801db000000 TRBase=fffffe0000003000
[  414.939562] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
23:11:44 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xe}}, 0x1c)

23:11:44 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x3, 0x0, 0x307)
close(r1)

23:11:44 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020b0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:44 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:44 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7304", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:44 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x3000000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:44 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x60000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  414.945453] CR0=0000000080050033 CR3=00000001b579c000 CR4=00000000001426f0
[  414.952470] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380
[  414.959159] EFER = 0x0000000000000d01  PAT = 0x0000000000000000
[  414.965211] *** Control State ***
[  414.968659] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[  414.975328] EntryControls=0000d1ff ExitControls=0023efff
[  414.980789] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  414.987733] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000
23:11:44 executing program 7:
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x108)

[  414.994416] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
[  415.001018]         reason=80000021 qualification=0000000000000000
[  415.007344] IDTVectoring: info=00000000 errcode=00000000
[  415.012810] TSC Offset = 0xffffff1fffe966ed
[  415.017145] EPT pointer = 0x000000019dcb801e
23:11:44 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xf4010000, 0x0, 0x307)
close(r1)

23:11:44 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x600, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:44 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xf0ffffffffffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:44 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0xd9d, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb000c00000064936e637997356cb6a929fcb53d"], &(0x7f0000000000))

[  415.211090] FAT-fs (loop3): Directory bread(block 2569) failed
[  415.211138] FAT-fs (loop0): Directory bread(block 2569) failed
[  415.217223] FAT-fs (loop3): Directory bread(block 2570) failed
[  415.223147] FAT-fs (loop0): Directory bread(block 2570) failed
[  415.231383] FAT-fs (loop3): Directory bread(block 2571) failed
[  415.241393] FAT-fs (loop0): Directory bread(block 2571) failed
[  415.247451] FAT-fs (loop3): Directory bread(block 2572) failed
[  415.253482] FAT-fs (loop3): Directory bread(block 2573) failed
23:11:44 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73fc", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  415.253511] FAT-fs (loop0): Directory bread(block 2572) failed
[  415.261434] FAT-fs (loop0): Directory bread(block 2573) failed
[  415.265545] FAT-fs (loop3): Directory bread(block 2574) failed
[  415.265563] FAT-fs (loop3): Directory bread(block 2575) failed
[  415.271551] FAT-fs (loop0): Directory bread(block 2574) failed
[  415.279706] FAT-fs (loop3): Directory bread(block 2576) failed
[  415.288532] FAT-fs (loop0): Directory bread(block 2575) failed
[  415.296179] FAT-fs (loop3): Directory bread(block 2577) failed
23:11:44 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x800e, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:44 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x3000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:44 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7301", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  415.301816] FAT-fs (loop0): Directory bread(block 2576) failed
[  415.315687] FAT-fs (loop3): Directory bread(block 2578) failed
[  415.321742] FAT-fs (loop0): Directory bread(block 2577) failed
[  415.321759] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:45 executing program 7:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r0, 0x0)
io_setup(0xe18, &(0x7f0000000040))

23:11:45 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c)

23:11:45 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200022a0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:45 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xe020000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:45 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x52000000, 0x0, 0x307)
close(r1)

23:11:45 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x3000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:45 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73d8", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:45 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73c5", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:45 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\n', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  415.934434] FAT-fs (loop3): Directory bread(block 2569) failed
[  415.944957] FAT-fs (loop3): Directory bread(block 2570) failed
[  415.951060] FAT-fs (loop3): Directory bread(block 2571) failed
[  415.957089] FAT-fs (loop3): Directory bread(block 2572) failed
[  415.965349] FAT-fs (loop3): Directory bread(block 2573) failed
[  415.975395] FAT-fs (loop3): Directory bread(block 2574) failed
23:11:45 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x30, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:45 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x60, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  415.985380] FAT-fs (loop3): Directory bread(block 2575) failed
[  415.995590] FAT-fs (loop3): Directory bread(block 2576) failed
[  416.005527] FAT-fs (loop3): Directory bread(block 2577) failed
[  416.015748] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:45 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200022b0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:45 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070")
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)
r3 = syz_open_dev$loop(&(0x7f00000007c0)='/dev/loop#\x00', 0x0, 0x82)
r4 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r3, &(0x7f0000000000)=0x61, 0x2000005)

23:11:45 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:45 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xffffca88, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:45 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:45 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x600000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  416.178941] FAT-fs (loop3): Directory bread(block 2569) failed
[  416.185035] FAT-fs (loop3): Directory bread(block 2570) failed
[  416.191064] FAT-fs (loop3): Directory bread(block 2571) failed
[  416.199338] FAT-fs (loop3): Directory bread(block 2572) failed
[  416.208968] FAT-fs (loop5): bogus number of reserved sectors
[  416.209431] FAT-fs (loop3): Directory bread(block 2573) failed
[  416.214879] FAT-fs (loop5): Can't find a valid FAT filesystem
[  416.228547] FAT-fs (loop3): Directory bread(block 2574) failed
[  416.238591] FAT-fs (loop3): Directory bread(block 2575) failed
[  416.248741] FAT-fs (loop3): Directory bread(block 2576) failed
[  416.258773] FAT-fs (loop3): Directory bread(block 2577) failed
[  416.268937] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:46 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xa00000000000000}}, 0x1c)

23:11:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xffffa888, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:46 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002090af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:46 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet(0x2, 0x6000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x7fe, 0x1de)
sendto$inet(r1, &(0x7f00000002c0)="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", 0x580, 0x8000, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10)
r2 = dup3(r1, r0, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="fbffffffffffffffe199f126502b38377273b0330a"], 0x15)
sendto$inet(r2, &(0x7f0000000840)="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", 0x594, 0x0, &(0x7f00000000c0), 0x10)

23:11:46 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x4002, 0x0, 0x307)
close(r1)

23:11:46 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x800000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8035000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  416.875066] FAT-fs (loop3): Directory bread(block 2569) failed
[  416.881236] FAT-fs (loop3): Directory bread(block 2570) failed
[  416.887255] FAT-fs (loop3): Directory bread(block 2571) failed
[  416.895618] FAT-fs (loop3): Directory bread(block 2572) failed
[  416.904247] FAT-fs (loop0): Directory bread(block 2569) failed
[  416.910295] FAT-fs (loop3): Directory bread(block 2573) failed
[  416.915760] FAT-fs (loop0): Directory bread(block 2570) failed
23:11:46 executing program 7:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000180)=""/31)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080))
ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070")
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
unshare(0x2000400)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/90)

[  416.922291] FAT-fs (loop0): Directory bread(block 2571) failed
[  416.925776] FAT-fs (loop3): Directory bread(block 2574) failed
[  416.928320] FAT-fs (loop0): Directory bread(block 2572) failed
[  416.928336] FAT-fs (loop0): Directory bread(block 2573) failed
[  416.928352] FAT-fs (loop0): Directory bread(block 2574) failed
[  416.928369] FAT-fs (loop0): Directory bread(block 2575) failed
[  416.928450] FAT-fs (loop0): Directory bread(block 2576) failed
[  416.934396] FAT-fs (loop3): Directory bread(block 2575) failed
23:11:46 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73f0", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002230af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xb00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  416.946049] FAT-fs (loop0): Directory bread(block 2577) failed
[  416.950589] FAT-fs (loop3): Directory bread(block 2576) failed
[  416.956072] FAT-fs (loop0): Directory bread(block 2578) failed
[  416.960537] FAT-fs (loop3): Directory bread(block 2577) failed
[  417.011018] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x88a8ffff00000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:46 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  417.164288] FAT-fs (loop3): Directory bread(block 2569) failed
[  417.170396] FAT-fs (loop3): Directory bread(block 2570) failed
[  417.182951] FAT-fs (loop3): Directory bread(block 2571) failed
[  417.190092] FAT-fs (loop3): Directory bread(block 2572) failed
[  417.196266] FAT-fs (loop3): Directory bread(block 2573) failed
[  417.204917] FAT-fs (loop3): Directory bread(block 2574) failed
[  417.214624] FAT-fs (loop5): bogus number of reserved sectors
[  417.215173] FAT-fs (loop3): Directory bread(block 2575) failed
[  417.220477] FAT-fs (loop5): Can't find a valid FAT filesystem
[  417.234202] FAT-fs (loop3): Directory bread(block 2576) failed
[  417.244152] FAT-fs (loop3): Directory bread(block 2577) failed
[  417.254308] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:46 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x2000000}}, 0x1c)

23:11:46 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='comm\x00')
write$9p(r1, &(0x7f0000000400), 0x0)

23:11:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x4000000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xb, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:46 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xe803, 0x0, 0x307)
close(r1)

23:11:46 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\r', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:46 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:46 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002160af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:46 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8864000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:46 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8906000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  417.707364] FAT-fs (loop3): Directory bread(block 2569) failed
[  417.713460] FAT-fs (loop3): Directory bread(block 2570) failed
[  417.719477] FAT-fs (loop3): Directory bread(block 2571) failed
[  417.727912] FAT-fs (loop3): Directory bread(block 2572) failed
[  417.734162] FAT-fs (loop3): Directory bread(block 2573) failed
[  417.740175] FAT-fs (loop3): Directory bread(block 2574) failed
[  417.748318] FAT-fs (loop3): Directory bread(block 2575) failed
23:11:47 executing program 7:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000004100))
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000005400))
recvmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f0000003e40)=@nfc_llcp, 0x80, &(0x7f0000005940)=[{&(0x7f00000059c0)=""/235, 0xeb}, {&(0x7f00000054c0)=""/170, 0xaa}, {&(0x7f0000005580)=""/51, 0xfffffe7b}, {&(0x7f00000055c0)=""/6, 0x6}, {&(0x7f0000005600)=""/114, 0x72}, {&(0x7f0000005680)=""/174, 0xae}, {&(0x7f0000005740)=""/224, 0xe0}, {&(0x7f0000005840)=""/222, 0xde}], 0x8}}, {{&(0x7f0000003f80)=@pppol2tpin6, 0x80, &(0x7f0000004100), 0x15c, &(0x7f0000004140)=""/77, 0x4d}}], 0x2, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0)

23:11:47 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x20000, 0x0, 0x307)
close(r1)

23:11:47 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:47 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002240af801", 0x17}], 0x0, &(0x7f0000000200))

[  417.768485] FAT-fs (loop3): Directory bread(block 2576) failed
[  417.774607] FAT-fs (loop3): Directory bread(block 2577) failed
[  417.780639] FAT-fs (loop3): Directory bread(block 2578) failed
[  417.790792] FAT-fs (loop5): bogus number of reserved sectors
[  417.796667] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:47 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x8000000}}, 0x1c)

23:11:47 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  417.906204] FAT-fs (loop0): Directory bread(block 2569) failed
[  417.906290] FAT-fs (loop3): Directory bread(block 2569) failed
[  417.912282] FAT-fs (loop0): Directory bread(block 2570) failed
[  417.918280] FAT-fs (loop3): Directory bread(block 2570) failed
[  417.927218] FAT-fs (loop0): Directory bread(block 2571) failed
[  417.934385] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  417.936717] FAT-fs (loop0): Directory bread(block 2572) failed
[  417.943869] FAT-fs (loop3): Directory bread(block 2571) failed
23:11:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x806000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  417.954416] FAT-fs (loop0): Directory bread(block 2573) failed
[  417.956434] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  417.964522] FAT-fs (loop0): Directory bread(block 2574) failed
[  417.969283] FAT-fs (loop3): Directory bread(block 2572) failed
[  417.975129] FAT-fs (loop0): Directory bread(block 2575) failed
[  417.975203] FAT-fs (loop0): Directory bread(block 2576) failed
[  417.981123] FAT-fs (loop3): Directory bread(block 2573) failed
[  417.987369] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  417.996444] FAT-fs (loop3): Directory bread(block 2574) failed
[  417.999877] FAT-fs (loop0): Directory bread(block 2577) failed
[  418.010738] FAT-fs (loop3): Directory bread(block 2575) failed
[  418.016083] FAT-fs (loop0): Directory bread(block 2578) failed
[  418.023092] FAT-fs (loop3): Directory bread(block 2576) failed
[  418.027142] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  418.040617] FAT-fs (loop3): Directory bread(block 2577) failed
23:11:47 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002280af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:47 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:47 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
shutdown(r1, 0x1)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
dup3(r0, r1, 0x0)

[  418.044889] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  418.049782] FAT-fs (loop3): Directory bread(block 2578) failed
[  418.064147] netlink: 'syz-executor7': attribute type 29 has an invalid length.
23:11:47 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xe0, 0x0, 0x307)
close(r1)

23:11:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x43050000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x22020000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  418.185178] FAT-fs (loop5): bogus number of reserved sectors
[  418.191118] FAT-fs (loop5): Can't find a valid FAT filesystem
[  418.207803] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
23:11:47 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos`', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:47 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x4000000000000000, 0x0, 0x307)
close(r1)

23:11:47 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8864, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:47 executing program 7:

[  418.270898] FAT-fs (loop0): Directory bread(block 2569) failed
[  418.276971] FAT-fs (loop0): Directory bread(block 2570) failed
[  418.282991] FAT-fs (loop0): Directory bread(block 2571) failed
[  418.291288] FAT-fs (loop0): Directory bread(block 2572) failed
[  418.301334] FAT-fs (loop0): Directory bread(block 2573) failed
[  418.311410] FAT-fs (loop0): Directory bread(block 2574) failed
23:11:47 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x80350000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  418.321846] FAT-fs (loop0): Directory bread(block 2575) failed
[  418.330028] FAT-fs (loop3): Directory bread(block 2569) failed
[  418.336075] FAT-fs (loop3): Directory bread(block 2570) failed
[  418.336119] FAT-fs (loop0): Directory bread(block 2576) failed
[  418.342083] FAT-fs (loop3): Directory bread(block 2571) failed
[  418.351712] FAT-fs (loop0): Directory bread(block 2577) failed
[  418.360457] FAT-fs (loop3): Directory bread(block 2572) failed
[  418.361739] FAT-fs (loop0): Directory bread(block 2578) failed
[  418.370326] FAT-fs (loop3): Directory bread(block 2573) failed
[  418.380357] FAT-fs (loop3): Directory bread(block 2574) failed
[  418.386414] FAT-fs (loop3): Directory bread(block 2575) failed
[  418.393983] FAT-fs (loop3): Directory bread(block 2576) failed
[  418.415316] FAT-fs (loop3): Directory bread(block 2577) failed
23:11:47 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7302", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  418.421406] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:48 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x9000000}}, 0x1c)

23:11:48 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:48 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:48 executing program 7:

23:11:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x700, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xffffdd86, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:48 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\n', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:48 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x9000000, 0x0, 0x307)
close(r1)

23:11:48 executing program 7:

[  418.910481] FAT-fs (loop3): Directory bread(block 2569) failed
[  418.916666] FAT-fs (loop3): Directory bread(block 2570) failed
[  418.926832] FAT-fs (loop3): Directory bread(block 2571) failed
[  418.936858] FAT-fs (loop3): Directory bread(block 2572) failed
[  418.946952] FAT-fs (loop3): Directory bread(block 2573) failed
23:11:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x8100, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x1c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  418.957119] FAT-fs (loop3): Directory bread(block 2574) failed
[  418.963831] FAT-fs (loop5): bogus number of reserved sectors
[  418.967134] FAT-fs (loop3): Directory bread(block 2575) failed
[  418.969701] FAT-fs (loop5): Can't find a valid FAT filesystem
[  418.977346] FAT-fs (loop3): Directory bread(block 2576) failed
[  418.988627] FAT-fs (loop3): Directory bread(block 2577) failed
[  418.998654] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:48 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:48 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002250af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:48 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7397", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:48 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070")
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)
r3 = syz_open_dev$loop(&(0x7f00000007c0)='/dev/loop#\x00', 0x0, 0x82)
r4 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r3, &(0x7f0000000000)=0x37, 0x2000005)

[  419.114111] FAT-fs (loop0): Directory bread(block 2569) failed
[  419.120290] FAT-fs (loop0): Directory bread(block 2570) failed
[  419.126346] FAT-fs (loop0): Directory bread(block 2571) failed
[  419.127196] FAT-fs (loop3): Directory bread(block 2569) failed
[  419.134866] FAT-fs (loop0): Directory bread(block 2572) failed
[  419.138481] FAT-fs (loop3): Directory bread(block 2570) failed
[  419.144958] FAT-fs (loop0): Directory bread(block 2573) failed
[  419.150529] FAT-fs (loop3): Directory bread(block 2571) failed
23:11:48 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x88a8ffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  419.160048] FAT-fs (loop0): Directory bread(block 2574) failed
[  419.170194] FAT-fs (loop0): Directory bread(block 2575) failed
[  419.170432] FAT-fs (loop3): Directory bread(block 2572) failed
[  419.176310] FAT-fs (loop0): Directory bread(block 2576) failed
[  419.189901] FAT-fs (loop3): Directory bread(block 2573) failed
[  419.195900] FAT-fs (loop0): Directory bread(block 2577) failed
[  419.195919] FAT-fs (loop0): Directory bread(block 2578) failed
[  419.210007] FAT-fs (loop3): Directory bread(block 2574) failed
[  419.230064] FAT-fs (loop3): Directory bread(block 2575) failed
[  419.240217] FAT-fs (loop3): Directory bread(block 2576) failed
[  419.250389] FAT-fs (loop3): Directory bread(block 2577) failed
[  419.260400] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:49 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:49 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x7}}, 0x1c)

23:11:49 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x88470000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xffffca88, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:49 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002140af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:49 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:49 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xe0ffffff, 0x0, 0x307)
close(r1)

23:11:49 executing program 7:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x200, 0x0)
read(r3, &(0x7f0000000140)=""/197, 0xc5)
dup3(r2, r3, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
tkill(r4, 0x1000000000013)

23:11:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x300000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:49 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x88a8ffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  419.827096] FAT-fs (loop3): Directory bread(block 2569) failed
[  419.833168] FAT-fs (loop3): Directory bread(block 2570) failed
[  419.847232] FAT-fs (loop3): Directory bread(block 2571) failed
[  419.853340] FAT-fs (loop3): Directory bread(block 2572) failed
[  419.859365] FAT-fs (loop3): Directory bread(block 2573) failed
[  419.867536] FAT-fs (loop3): Directory bread(block 2574) failed
[  419.876197] FAT-fs (loop5): bogus number of reserved sectors
[  419.882211] FAT-fs (loop5): Can't find a valid FAT filesystem
[  419.882285] FAT-fs (loop3): Directory bread(block 2575) failed
[  419.897805] FAT-fs (loop3): Directory bread(block 2576) failed
[  419.908090] FAT-fs (loop3): Directory bread(block 2577) failed
[  419.914398] FAT-fs (loop0): Directory bread(block 2569) failed
[  419.920455] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:49 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xa00, 0x0, 0x307)
close(r1)

23:11:49 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002130af801", 0x17}], 0x0, &(0x7f0000000200))

[  419.920462] FAT-fs (loop0): Directory bread(block 2570) failed
[  419.920499] FAT-fs (loop0): Directory bread(block 2571) failed
[  419.946640] FAT-fs (loop0): Directory bread(block 2572) failed
[  419.956780] FAT-fs (loop0): Directory bread(block 2573) failed
[  419.967119] FAT-fs (loop0): Directory bread(block 2574) failed
23:11:49 executing program 7:
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = syz_open_dev$loop(&(0x7f00000007c0)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, &(0x7f0000000000)=0x36, 0x2000005)

23:11:49 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:49 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xf000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:49 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  419.977710] FAT-fs (loop0): Directory bread(block 2575) failed
[  419.987079] FAT-fs (loop0): Directory bread(block 2576) failed
[  419.997405] FAT-fs (loop0): Directory bread(block 2577) failed
[  420.007624] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8864000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  420.120803] FAT-fs (loop3): Directory bread(block 2569) failed
[  420.126860] FAT-fs (loop3): Directory bread(block 2570) failed
[  420.132883] FAT-fs (loop3): Directory bread(block 2571) failed
[  420.141240] FAT-fs (loop3): Directory bread(block 2572) failed
[  420.151324] FAT-fs (loop3): Directory bread(block 2573) failed
[  420.161431] FAT-fs (loop3): Directory bread(block 2574) failed
[  420.171377] FAT-fs (loop3): Directory bread(block 2575) failed
[  420.181565] FAT-fs (loop3): Directory bread(block 2576) failed
[  420.191565] FAT-fs (loop3): Directory bread(block 2577) failed
[  420.198576] FAT-fs (loop5): bogus number of reserved sectors
[  420.201793] FAT-fs (loop3): Directory bread(block 2578) failed
[  420.204435] FAT-fs (loop5): Can't find a valid FAT filesystem
[  420.275102] FAT-fs (loop0): Directory bread(block 2569) failed
[  420.285670] FAT-fs (loop0): Directory bread(block 2570) failed
[  420.291737] FAT-fs (loop0): Directory bread(block 2571) failed
[  420.297755] FAT-fs (loop0): Directory bread(block 2572) failed
[  420.306444] FAT-fs (loop0): Directory bread(block 2573) failed
[  420.316543] FAT-fs (loop0): Directory bread(block 2574) failed
[  420.326640] FAT-fs (loop0): Directory bread(block 2575) failed
[  420.336832] FAT-fs (loop0): Directory bread(block 2576) failed
[  420.346837] FAT-fs (loop0): Directory bread(block 2577) failed
[  420.356997] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:49 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002100af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:49 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xfe80000000000000}}, 0x1c)

23:11:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8848000000000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:49 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r3, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:49 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:49 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x2202, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:49 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xf401, 0x0, 0x307)
close(r1)

23:11:49 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\n', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:49 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x40000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0xd, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  420.751133] FAT-fs (loop3): Directory bread(block 2569) failed
[  420.757205] FAT-fs (loop3): Directory bread(block 2570) failed
[  420.763234] FAT-fs (loop3): Directory bread(block 2571) failed
[  420.771508] FAT-fs (loop3): Directory bread(block 2572) failed
[  420.781029] FAT-fs (loop5): bogus number of reserved sectors
[  420.781578] FAT-fs (loop3): Directory bread(block 2573) failed
[  420.786957] FAT-fs (loop5): Can't find a valid FAT filesystem
23:11:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x5000000}}, 0x1c)

23:11:50 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:50 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x500, 0x0, 0x307)
close(r1)

23:11:50 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002290af801", 0x17}], 0x0, &(0x7f0000000200))

[  420.800759] FAT-fs (loop3): Directory bread(block 2574) failed
[  420.810916] FAT-fs (loop3): Directory bread(block 2575) failed
[  420.820866] FAT-fs (loop3): Directory bread(block 2576) failed
[  420.830797] FAT-fs (loop3): Directory bread(block 2577) failed
[  420.841132] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:50 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r3, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:50 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73f4", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8847, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x14, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:50 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xb, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:50 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r3, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

[  421.006563] FAT-fs (loop3): Directory bread(block 2569) failed
[  421.012650] FAT-fs (loop3): Directory bread(block 2570) failed
[  421.018661] FAT-fs (loop3): Directory bread(block 2571) failed
[  421.026996] FAT-fs (loop3): Directory bread(block 2572) failed
[  421.038550] FAT-fs (loop3): Directory bread(block 2573) failed
[  421.048093] FAT-fs (loop3): Directory bread(block 2574) failed
23:11:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x3580, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:50 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200021c0af801", 0x17}], 0x0, &(0x7f0000000200))

[  421.058171] FAT-fs (loop3): Directory bread(block 2575) failed
[  421.068269] FAT-fs (loop3): Directory bread(block 2576) failed
[  421.078483] FAT-fs (loop3): Directory bread(block 2577) failed
[  421.088387] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:50 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x1c00, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:50 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  421.221896] FAT-fs (loop3): Directory bread(block 2569) failed
[  421.228063] FAT-fs (loop3): Directory bread(block 2570) failed
[  421.234079] FAT-fs (loop3): Directory bread(block 2571) failed
[  421.242439] FAT-fs (loop3): Directory bread(block 2572) failed
[  421.252469] FAT-fs (loop3): Directory bread(block 2573) failed
[  421.262546] FAT-fs (loop3): Directory bread(block 2574) failed
[  421.272655] FAT-fs (loop3): Directory bread(block 2575) failed
[  421.282736] FAT-fs (loop3): Directory bread(block 2576) failed
[  421.292770] FAT-fs (loop3): Directory bread(block 2577) failed
[  421.302951] FAT-fs (loop3): Directory bread(block 2578) failed
[  421.333662] FAT-fs (loop5): bogus number of reserved sectors
[  421.339553] FAT-fs (loop5): Can't find a valid FAT filesystem
[  421.364319] FAT-fs (loop0): Directory bread(block 2569) failed
[  421.370428] FAT-fs (loop0): Directory bread(block 2570) failed
[  421.376443] FAT-fs (loop0): Directory bread(block 2571) failed
[  421.384765] FAT-fs (loop0): Directory bread(block 2572) failed
[  421.394789] FAT-fs (loop0): Directory bread(block 2573) failed
[  421.404886] FAT-fs (loop0): Directory bread(block 2574) failed
[  421.414891] FAT-fs (loop0): Directory bread(block 2575) failed
[  421.424954] FAT-fs (loop0): Directory bread(block 2576) failed
[  421.434948] FAT-fs (loop0): Directory bread(block 2577) failed
[  421.445095] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:50 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x900}}, 0x1c)

23:11:50 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r3, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:50 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x34, 0x0, 0x307)
close(r1)

23:11:50 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x88caffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:50 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x8100, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:50 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002080af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:50 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos~', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:50 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:50 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

23:11:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:51 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x4788, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:51 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

[  421.791983] FAT-fs (loop0): Directory bread(block 2569) failed
[  421.798062] FAT-fs (loop0): Directory bread(block 2570) failed
[  421.804081] FAT-fs (loop0): Directory bread(block 2571) failed
[  421.812856] FAT-fs (loop0): Directory bread(block 2572) failed
[  421.822653] FAT-fs (loop0): Directory bread(block 2573) failed
[  421.833179] FAT-fs (loop0): Directory bread(block 2574) failed
[  421.843206] FAT-fs (loop0): Directory bread(block 2575) failed
[  421.853313] FAT-fs (loop0): Directory bread(block 2576) failed
[  421.863274] FAT-fs (loop0): Directory bread(block 2577) failed
[  421.873458] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x4788, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:51 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

23:11:51 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x60000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:51 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  422.077788] FAT-fs (loop0): Directory bread(block 2569) failed
[  422.083865] FAT-fs (loop0): Directory bread(block 2570) failed
[  422.089875] FAT-fs (loop0): Directory bread(block 2571) failed
[  422.098142] FAT-fs (loop0): Directory bread(block 2572) failed
[  422.108181] FAT-fs (loop0): Directory bread(block 2573) failed
[  422.118200] FAT-fs (loop0): Directory bread(block 2574) failed
[  422.128293] FAT-fs (loop0): Directory bread(block 2575) failed
[  422.138386] FAT-fs (loop0): Directory bread(block 2576) failed
[  422.148352] FAT-fs (loop0): Directory bread(block 2577) failed
[  422.158521] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:51 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xe803}}, 0x1c)

23:11:51 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:51 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200021b0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:51 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x300000000000000, 0x0, 0x307)
close(r1)

23:11:51 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:51 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x1000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:51 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  422.580577] FAT-fs (loop5): bogus number of reserved sectors
[  422.586458] FAT-fs (loop5): Can't find a valid FAT filesystem
[  422.615670] FAT-fs (loop3): Directory bread(block 2569) failed
[  422.620368] FAT-fs (loop0): Directory bread(block 2569) failed
23:11:51 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

[  422.621762] FAT-fs (loop3): Directory bread(block 2570) failed
[  422.627762] FAT-fs (loop0): Directory bread(block 2570) failed
[  422.639722] FAT-fs (loop3): Directory bread(block 2571) failed
[  422.643089] FAT-fs (loop0): Directory bread(block 2571) failed
[  422.646031] FAT-fs (loop3): Directory bread(block 2572) failed
[  422.652893] FAT-fs (loop0): Directory bread(block 2572) failed
[  422.665892] FAT-fs (loop0): Directory bread(block 2573) failed
[  422.666109] FAT-fs (loop3): Directory bread(block 2573) failed
[  422.675610] FAT-fs (loop0): Directory bread(block 2574) failed
[  422.685850] FAT-fs (loop0): Directory bread(block 2575) failed
[  422.685901] FAT-fs (loop3): Directory bread(block 2574) failed
[  422.691927] FAT-fs (loop0): Directory bread(block 2576) failed
[  422.705959] FAT-fs (loop3): Directory bread(block 2575) failed
[  422.710253] FAT-fs (loop0): Directory bread(block 2577) failed
[  422.716025] FAT-fs (loop3): Directory bread(block 2576) failed
[  422.720631] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:51 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:51 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x6488, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:51 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x300, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:52 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  422.726069] FAT-fs (loop3): Directory bread(block 2577) failed
[  422.735957] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:52 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002170af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x88caffff00000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:52 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r2})
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

[  422.852553] FAT-fs (loop5): bogus number of reserved sectors
[  422.858432] FAT-fs (loop5): Can't find a valid FAT filesystem
[  422.925042] FAT-fs (loop3): Directory bread(block 2569) failed
[  422.935165] FAT-fs (loop3): Directory bread(block 2570) failed
[  422.943704] FAT-fs (loop3): Directory bread(block 2571) failed
[  422.950231] FAT-fs (loop3): Directory bread(block 2572) failed
[  422.957064] FAT-fs (loop3): Directory bread(block 2573) failed
[  422.963458] FAT-fs (loop3): Directory bread(block 2574) failed
[  422.970237] FAT-fs (loop3): Directory bread(block 2575) failed
[  422.976526] FAT-fs (loop3): Directory bread(block 2576) failed
[  422.982655] FAT-fs (loop3): Directory bread(block 2577) failed
[  422.989694] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:52 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x500}}, 0x1c)

23:11:52 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x2202, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:52 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:52 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x81000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:52 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f730f", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:52 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002120af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:52 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x40000000, 0x0, 0x307)
close(r1)

23:11:52 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

[  423.562710] FAT-fs (loop3): Directory bread(block 2569) failed
[  423.568822] FAT-fs (loop3): Directory bread(block 2570) failed
[  423.576123] FAT-fs (loop5): bogus number of reserved sectors
[  423.582111] FAT-fs (loop5): Can't find a valid FAT filesystem
[  423.588079] FAT-fs (loop3): Directory bread(block 2571) failed
[  423.594109] FAT-fs (loop3): Directory bread(block 2572) failed
23:11:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:52 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x4888, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:52 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdosz', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:52 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  423.608261] FAT-fs (loop3): Directory bread(block 2573) failed
[  423.614394] FAT-fs (loop3): Directory bread(block 2574) failed
[  423.620438] FAT-fs (loop3): Directory bread(block 2575) failed
[  423.628857] FAT-fs (loop3): Directory bread(block 2576) failed
[  423.638785] FAT-fs (loop3): Directory bread(block 2577) failed
[  423.649248] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:52 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:52 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200022e0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:52 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  423.795902] FAT-fs (loop5): bogus number of reserved sectors
[  423.801948] FAT-fs (loop5): Can't find a valid FAT filesystem
[  423.824139] FAT-fs (loop3): Directory bread(block 2569) failed
[  423.830260] FAT-fs (loop3): Directory bread(block 2570) failed
[  423.836273] FAT-fs (loop3): Directory bread(block 2571) failed
[  423.844734] FAT-fs (loop3): Directory bread(block 2572) failed
[  423.854912] FAT-fs (loop3): Directory bread(block 2573) failed
[  423.864852] FAT-fs (loop3): Directory bread(block 2574) failed
[  423.874900] FAT-fs (loop3): Directory bread(block 2575) failed
[  423.885045] FAT-fs (loop3): Directory bread(block 2576) failed
[  423.895064] FAT-fs (loop3): Directory bread(block 2577) failed
[  423.905293] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:53 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200021a0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:53 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:53 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xfffffffffffff000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:53 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:53 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x3e8}}, 0x1c)

23:11:53 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x40020000, 0x0, 0x307)
close(r1)

[  424.392178] FAT-fs (loop5): bogus number of reserved sectors
[  424.392309] FAT-fs (loop3): Directory bread(block 2569) failed
[  424.398064] FAT-fs (loop5): Can't find a valid FAT filesystem
[  424.404072] FAT-fs (loop3): Directory bread(block 2570) failed
[  424.422288] FAT-fs (loop3): Directory bread(block 2571) failed
[  424.432284] FAT-fs (loop3): Directory bread(block 2572) failed
[  424.442386] FAT-fs (loop3): Directory bread(block 2573) failed
[  424.452417] FAT-fs (loop3): Directory bread(block 2574) failed
[  424.462559] FAT-fs (loop3): Directory bread(block 2575) failed
[  424.472891] FAT-fs (loop3): Directory bread(block 2576) failed
[  424.478811] FAT-fs (loop0): Directory bread(block 2569) failed
[  424.482742] FAT-fs (loop3): Directory bread(block 2577) failed
23:11:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:53 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x600000000000000}}, 0x1c)

23:11:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x60, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:53 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:53 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200022d0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:53 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  424.484961] FAT-fs (loop0): Directory bread(block 2570) failed
[  424.492893] FAT-fs (loop3): Directory bread(block 2578) failed
[  424.499306] FAT-fs (loop0): Directory bread(block 2571) failed
[  424.509265] FAT-fs (loop0): Directory bread(block 2572) failed
[  424.515459] FAT-fs (loop0): Directory bread(block 2573) failed
[  424.535679] FAT-fs (loop0): Directory bread(block 2574) failed
[  424.545831] FAT-fs (loop0): Directory bread(block 2575) failed
[  424.551953] FAT-fs (loop0): Directory bread(block 2576) failed
[  424.558226] FAT-fs (loop0): Directory bread(block 2577) failed
[  424.566340] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:53 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:53 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:53 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xe80, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  424.660641] FAT-fs (loop5): bogus number of reserved sectors
[  424.666631] FAT-fs (loop5): Can't find a valid FAT filesystem
[  424.675067] FAT-fs (loop3): Directory bread(block 2569) failed
[  424.681389] FAT-fs (loop3): Directory bread(block 2570) failed
[  424.687419] FAT-fs (loop3): Directory bread(block 2571) failed
[  424.695898] FAT-fs (loop3): Directory bread(block 2572) failed
23:11:53 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:53 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x8057, 0x0, 0x307)
close(r1)

[  424.706253] FAT-fs (loop3): Directory bread(block 2573) failed
[  424.716148] FAT-fs (loop3): Directory bread(block 2574) failed
[  424.726475] FAT-fs (loop3): Directory bread(block 2575) failed
[  424.736528] FAT-fs (loop3): Directory bread(block 2576) failed
[  424.742636] FAT-fs (loop3): Directory bread(block 2577) failed
[  424.752732] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:54 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x1400000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:54 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002190af801", 0x17}], 0x0, &(0x7f0000000200))

[  424.822780] FAT-fs (loop0): Directory bread(block 2569) failed
[  424.828883] FAT-fs (loop0): Directory bread(block 2570) failed
[  424.834902] FAT-fs (loop0): Directory bread(block 2571) failed
[  424.843193] FAT-fs (loop0): Directory bread(block 2572) failed
[  424.853354] FAT-fs (loop0): Directory bread(block 2573) failed
[  424.863302] FAT-fs (loop0): Directory bread(block 2574) failed
23:11:54 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:54 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:54 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xb00000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  424.873395] FAT-fs (loop0): Directory bread(block 2575) failed
[  424.883577] FAT-fs (loop0): Directory bread(block 2576) failed
[  424.893619] FAT-fs (loop0): Directory bread(block 2577) failed
[  424.903744] FAT-fs (loop0): Directory bread(block 2578) failed
[  424.932709] FAT-fs (loop5): bogus number of reserved sectors
[  424.938768] FAT-fs (loop5): Can't find a valid FAT filesystem
[  425.026682] FAT-fs (loop3): Directory bread(block 2569) failed
[  425.032760] FAT-fs (loop3): Directory bread(block 2570) failed
[  425.038797] FAT-fs (loop3): Directory bread(block 2571) failed
[  425.047042] FAT-fs (loop3): Directory bread(block 2572) failed
[  425.057148] FAT-fs (loop3): Directory bread(block 2573) failed
[  425.067164] FAT-fs (loop3): Directory bread(block 2574) failed
[  425.077264] FAT-fs (loop3): Directory bread(block 2575) failed
[  425.087443] FAT-fs (loop3): Directory bread(block 2576) failed
[  425.097396] FAT-fs (loop3): Directory bread(block 2577) failed
[  425.107541] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:54 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:54 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xb80b000000000000}}, 0x1c)

23:11:54 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x2, 0x0, 0x307)
close(r1)

23:11:54 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x88480000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:54 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:54 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:54 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200022500f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:54 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:54 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x6000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  425.476270] FAT-fs (loop5): bogus number of reserved sectors
[  425.482163] FAT-fs (loop5): Can't find a valid FAT filesystem
[  425.493133] FAT-fs (loop3): Directory bread(block 2569) failed
[  425.499240] FAT-fs (loop3): Directory bread(block 2570) failed
[  425.505265] FAT-fs (loop3): Directory bread(block 2571) failed
[  425.514022] FAT-fs (loop0): Directory bread(block 2569) failed
[  425.514081] FAT-fs (loop3): Directory bread(block 2572) failed
23:11:54 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:54 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

[  425.520103] FAT-fs (loop0): Directory bread(block 2570) failed
[  425.534515] FAT-fs (loop3): Directory bread(block 2573) failed
[  425.540617] FAT-fs (loop0): Directory bread(block 2571) failed
[  425.546668] FAT-fs (loop3): Directory bread(block 2574) failed
[  425.552711] FAT-fs (loop3): Directory bread(block 2575) failed
[  425.558789] FAT-fs (loop0): Directory bread(block 2572) failed
[  425.564807] FAT-fs (loop0): Directory bread(block 2573) failed
[  425.570924] FAT-fs (loop3): Directory bread(block 2576) failed
23:11:54 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:54 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002210af801", 0x17}], 0x0, &(0x7f0000000200))

[  425.576948] FAT-fs (loop3): Directory bread(block 2577) failed
[  425.583000] FAT-fs (loop0): Directory bread(block 2574) failed
[  425.589017] FAT-fs (loop0): Directory bread(block 2575) failed
[  425.595053] FAT-fs (loop3): Directory bread(block 2578) failed
[  425.603185] FAT-fs (loop0): Directory bread(block 2576) failed
[  425.613340] FAT-fs (loop0): Directory bread(block 2577) failed
[  425.619402] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:54 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdoss', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:54 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:54 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x3580, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:54 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

[  425.757291] FAT-fs (loop5): bogus number of reserved sectors
[  425.758025] FAT-fs (loop3): Directory bread(block 2569) failed
[  425.763287] FAT-fs (loop5): Can't find a valid FAT filesystem
[  425.769279] FAT-fs (loop3): Directory bread(block 2570) failed
[  425.787023] FAT-fs (loop3): Directory bread(block 2571) failed
[  425.796887] FAT-fs (loop3): Directory bread(block 2572) failed
[  425.807049] FAT-fs (loop3): Directory bread(block 2573) failed
[  425.816945] FAT-fs (loop3): Directory bread(block 2574) failed
[  425.827039] FAT-fs (loop3): Directory bread(block 2575) failed
[  425.837206] FAT-fs (loop3): Directory bread(block 2576) failed
[  425.847154] FAT-fs (loop3): Directory bread(block 2577) failed
[  425.857632] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:55 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020700f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:55 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xf401000000000000}}, 0x1c)

23:11:55 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:55 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:55 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x88480000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:55 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x100000000000000, 0x0, 0x307)
close(r1)

23:11:55 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:55 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x7, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  426.323884] FAT-fs (loop5): bogus number of reserved sectors
[  426.329813] FAT-fs (loop5): Can't find a valid FAT filesystem
[  426.359361] FAT-fs (loop0): Directory bread(block 2569) failed
[  426.368205] FAT-fs (loop3): Directory bread(block 2569) failed
[  426.369616] FAT-fs (loop0): Directory bread(block 2570) failed
[  426.374351] FAT-fs (loop3): Directory bread(block 2570) failed
[  426.380240] FAT-fs (loop0): Directory bread(block 2571) failed
[  426.388620] FAT-fs (loop3): Directory bread(block 2571) failed
[  426.397742] FAT-fs (loop0): Directory bread(block 2572) failed
[  426.398516] FAT-fs (loop3): Directory bread(block 2572) failed
[  426.407763] FAT-fs (loop0): Directory bread(block 2573) failed
[  426.414663] FAT-fs (loop3): Directory bread(block 2573) failed
23:11:55 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:55 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xd00, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  426.418642] FAT-fs (loop0): Directory bread(block 2574) failed
[  426.424208] FAT-fs (loop3): Directory bread(block 2574) failed
[  426.429330] FAT-fs (loop0): Directory bread(block 2575) failed
[  426.444377] FAT-fs (loop3): Directory bread(block 2575) failed
[  426.448023] FAT-fs (loop0): Directory bread(block 2576) failed
[  426.450481] FAT-fs (loop3): Directory bread(block 2576) failed
[  426.458211] FAT-fs (loop0): Directory bread(block 2577) failed
23:11:55 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x43050000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:55 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:55 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020200f801", 0x17}], 0x0, &(0x7f0000000200))

[  426.469291] FAT-fs (loop0): Directory bread(block 2578) failed
[  426.476469] FAT-fs (loop3): Directory bread(block 2577) failed
[  426.486370] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:55 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\b', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:55 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x5000000000000, 0x0, 0x307)
close(r1)

23:11:55 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:55 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  426.612859] FAT-fs (loop0): Directory bread(block 2569) failed
[  426.618939] FAT-fs (loop0): Directory bread(block 2570) failed
[  426.624983] FAT-fs (loop0): Directory bread(block 2571) failed
[  426.633206] FAT-fs (loop0): Directory bread(block 2572) failed
[  426.643739] FAT-fs (loop0): Directory bread(block 2573) failed
[  426.653376] FAT-fs (loop0): Directory bread(block 2574) failed
[  426.663482] FAT-fs (loop0): Directory bread(block 2575) failed
[  426.673592] FAT-fs (loop0): Directory bread(block 2576) failed
[  426.679656] FAT-fs (loop0): Directory bread(block 2577) failed
[  426.685738] FAT-fs (loop0): Directory bread(block 2578) failed
[  426.702828] FAT-fs (loop3): Directory bread(block 2569) failed
[  426.709022] FAT-fs (loop3): Directory bread(block 2570) failed
[  426.715052] FAT-fs (loop3): Directory bread(block 2571) failed
[  426.723438] FAT-fs (loop3): Directory bread(block 2572) failed
[  426.733433] FAT-fs (loop3): Directory bread(block 2573) failed
[  426.743592] FAT-fs (loop3): Directory bread(block 2574) failed
[  426.753687] FAT-fs (loop3): Directory bread(block 2575) failed
[  426.763857] FAT-fs (loop3): Directory bread(block 2576) failed
[  426.773953] FAT-fs (loop3): Directory bread(block 2577) failed
[  426.784161] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:56 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x8dffffff00000000}}, 0x1c)

23:11:56 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x700, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:56 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos&', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:56 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x4305000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:56 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:56 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:56 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002180af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:56 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xe8030000, 0x0, 0x307)
close(r1)

23:11:56 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:56 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x80350000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:56 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  427.218289] FAT-fs (loop5): bogus number of reserved sectors
[  427.224480] FAT-fs (loop5): Can't find a valid FAT filesystem
[  427.231275] FAT-fs (loop3): Directory bread(block 2569) failed
[  427.237374] FAT-fs (loop3): Directory bread(block 2570) failed
[  427.251686] FAT-fs (loop3): Directory bread(block 2571) failed
[  427.257734] FAT-fs (loop3): Directory bread(block 2572) failed
23:11:56 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:56 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  427.263872] FAT-fs (loop3): Directory bread(block 2573) failed
[  427.272127] FAT-fs (loop3): Directory bread(block 2574) failed
[  427.282351] FAT-fs (loop3): Directory bread(block 2575) failed
[  427.302530] FAT-fs (loop3): Directory bread(block 2576) failed
23:11:56 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200022c0af801", 0x17}], 0x0, &(0x7f0000000200))

[  427.318851] FAT-fs (loop3): Directory bread(block 2577) failed
[  427.324944] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:56 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x8100, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:56 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  427.391173] FAT-fs (loop5): bogus number of reserved sectors
[  427.397280] FAT-fs (loop5): Can't find a valid FAT filesystem
[  427.481810] FAT-fs (loop3): Directory bread(block 2569) failed
[  427.487940] FAT-fs (loop3): Directory bread(block 2570) failed
[  427.494010] FAT-fs (loop3): Directory bread(block 2571) failed
[  427.502291] FAT-fs (loop3): Directory bread(block 2572) failed
[  427.512451] FAT-fs (loop3): Directory bread(block 2573) failed
[  427.522607] FAT-fs (loop3): Directory bread(block 2574) failed
[  427.532693] FAT-fs (loop3): Directory bread(block 2575) failed
[  427.542845] FAT-fs (loop3): Directory bread(block 2576) failed
[  427.552833] FAT-fs (loop3): Directory bread(block 2577) failed
[  427.562977] FAT-fs (loop3): Directory bread(block 2578) failed
[  427.570019] FAT-fs (loop0): Directory bread(block 2569) failed
[  427.576061] FAT-fs (loop0): Directory bread(block 2570) failed
[  427.582080] FAT-fs (loop0): Directory bread(block 2571) failed
[  427.590517] FAT-fs (loop0): Directory bread(block 2572) failed
[  427.600540] FAT-fs (loop0): Directory bread(block 2573) failed
[  427.610672] FAT-fs (loop0): Directory bread(block 2574) failed
[  427.620792] FAT-fs (loop0): Directory bread(block 2575) failed
[  427.630861] FAT-fs (loop0): Directory bread(block 2576) failed
[  427.640834] FAT-fs (loop0): Directory bread(block 2577) failed
[  427.650979] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:57 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x7000000}}, 0x1c)

23:11:57 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:57 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:57 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
socket$inet6(0xa, 0x1000000000002, 0x0)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:57 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xb824030000000000, 0x0, 0x307)
close(r1)

23:11:57 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x8864000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:57 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200021d0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:57 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:57 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xffffffff00000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:57 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
socket$inet6(0xa, 0x1000000000002, 0x0)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

[  428.052874] FAT-fs (loop0): Directory bread(block 2569) failed
[  428.058971] FAT-fs (loop0): Directory bread(block 2570) failed
[  428.069963] FAT-fs (loop5): bogus number of reserved sectors
[  428.073889] FAT-fs (loop0): Directory bread(block 2571) failed
[  428.075885] FAT-fs (loop5): Can't find a valid FAT filesystem
[  428.087403] FAT-fs (loop0): Directory bread(block 2572) failed
[  428.093797] FAT-fs (loop0): Directory bread(block 2573) failed
23:11:57 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  428.099817] FAT-fs (loop0): Directory bread(block 2574) failed
[  428.108161] FAT-fs (loop0): Directory bread(block 2575) failed
[  428.114738] FAT-fs (loop3): Directory bread(block 2569) failed
[  428.120844] FAT-fs (loop0): Directory bread(block 2576) failed
[  428.120864] FAT-fs (loop0): Directory bread(block 2577) failed
[  428.120879] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:57 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  428.148611] FAT-fs (loop3): Directory bread(block 2570) failed
[  428.157188] FAT-fs (loop3): Directory bread(block 2571) failed
[  428.167428] FAT-fs (loop3): Directory bread(block 2572) failed
[  428.177536] FAT-fs (loop3): Directory bread(block 2573) failed
[  428.187777] FAT-fs (loop3): Directory bread(block 2574) failed
23:11:57 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7310", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:57 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x8847000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:57 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:57 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020a00f801", 0x17}], 0x0, &(0x7f0000000200))

[  428.197897] FAT-fs (loop3): Directory bread(block 2575) failed
[  428.208115] FAT-fs (loop3): Directory bread(block 2576) failed
[  428.218236] FAT-fs (loop3): Directory bread(block 2577) failed
[  428.228435] FAT-fs (loop3): Directory bread(block 2578) failed
[  428.332110] FAT-fs (loop0): Directory bread(block 2569) failed
[  428.338179] FAT-fs (loop0): Directory bread(block 2570) failed
[  428.344210] FAT-fs (loop0): Directory bread(block 2571) failed
[  428.352809] FAT-fs (loop0): Directory bread(block 2572) failed
[  428.362835] FAT-fs (loop0): Directory bread(block 2573) failed
[  428.372998] FAT-fs (loop0): Directory bread(block 2574) failed
[  428.383014] FAT-fs (loop0): Directory bread(block 2575) failed
[  428.393169] FAT-fs (loop0): Directory bread(block 2576) failed
[  428.403135] FAT-fs (loop0): Directory bread(block 2577) failed
[  428.407242] FAT-fs (loop3): Directory bread(block 2569) failed
[  428.413975] FAT-fs (loop0): Directory bread(block 2578) failed
[  428.415347] FAT-fs (loop3): Directory bread(block 2570) failed
[  428.430776] FAT-fs (loop3): Directory bread(block 2571) failed
[  428.440965] FAT-fs (loop3): Directory bread(block 2572) failed
[  428.450892] FAT-fs (loop3): Directory bread(block 2573) failed
[  428.461000] FAT-fs (loop3): Directory bread(block 2574) failed
[  428.471079] FAT-fs (loop3): Directory bread(block 2575) failed
[  428.481166] FAT-fs (loop3): Directory bread(block 2576) failed
[  428.491203] FAT-fs (loop3): Directory bread(block 2577) failed
[  428.501347] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:58 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xe00}}, 0x1c)

23:11:58 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
socket$inet6(0xa, 0x1000000000002, 0x0)
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:58 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x4002000000000000, 0x0, 0x307)
close(r1)

23:11:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x100000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:58 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:58 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:58 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020f0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:58 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xd000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  428.914262] FAT-fs (loop0): Directory bread(block 2569) failed
[  428.920359] FAT-fs (loop0): Directory bread(block 2570) failed
[  428.926426] FAT-fs (loop0): Directory bread(block 2571) failed
[  428.935047] FAT-fs (loop0): Directory bread(block 2572) failed
[  428.945197] FAT-fs (loop0): Directory bread(block 2573) failed
[  428.955287] FAT-fs (loop0): Directory bread(block 2574) failed
[  428.965386] FAT-fs (loop0): Directory bread(block 2575) failed
[  428.967559] FAT-fs (loop3): Directory bread(block 2569) failed
[  428.977627] FAT-fs (loop3): Directory bread(block 2570) failed
[  428.984615] FAT-fs (loop5): bogus number of reserved sectors
[  428.987650] FAT-fs (loop3): Directory bread(block 2571) failed
[  428.990506] FAT-fs (loop5): Can't find a valid FAT filesystem
[  428.990583] FAT-fs (loop0): Directory bread(block 2576) failed
[  428.997672] FAT-fs (loop3): Directory bread(block 2572) failed
23:11:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x8035000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  429.002770] FAT-fs (loop0): Directory bread(block 2577) failed
[  429.010612] FAT-fs (loop3): Directory bread(block 2573) failed
[  429.020408] FAT-fs (loop0): Directory bread(block 2578) failed
[  429.027447] FAT-fs (loop3): Directory bread(block 2574) failed
[  429.046568] FAT-fs (loop3): Directory bread(block 2575) failed
[  429.056914] FAT-fs (loop3): Directory bread(block 2576) failed
23:11:58 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:58 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  429.066951] FAT-fs (loop3): Directory bread(block 2577) failed
[  429.077262] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:58 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200021f0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:58 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x1b1414ac}}, 0x1c)

23:11:58 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x7000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  429.173351] FAT-fs (loop0): Directory bread(block 2569) failed
[  429.183842] FAT-fs (loop0): Directory bread(block 2570) failed
[  429.189962] FAT-fs (loop0): Directory bread(block 2571) failed
[  429.196016] FAT-fs (loop0): Directory bread(block 2572) failed
[  429.204338] FAT-fs (loop0): Directory bread(block 2573) failed
[  429.214539] FAT-fs (loop0): Directory bread(block 2574) failed
23:11:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  429.224539] FAT-fs (loop0): Directory bread(block 2575) failed
[  429.234669] FAT-fs (loop0): Directory bread(block 2576) failed
[  429.244818] FAT-fs (loop0): Directory bread(block 2577) failed
[  429.254935] FAT-fs (loop0): Directory bread(block 2578) failed
[  429.280100] FAT-fs (loop3): Directory bread(block 2569) failed
[  429.289321] FAT-fs (loop5): bogus number of reserved sectors
[  429.295238] FAT-fs (loop5): Can't find a valid FAT filesystem
[  429.301215] FAT-fs (loop3): Directory bread(block 2570) failed
[  429.307246] FAT-fs (loop3): Directory bread(block 2571) failed
[  429.313310] FAT-fs (loop3): Directory bread(block 2572) failed
[  429.321421] FAT-fs (loop3): Directory bread(block 2573) failed
23:11:58 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x52, 0x0, 0x307)
close(r1)

23:11:58 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xd00000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:58 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  429.331533] FAT-fs (loop3): Directory bread(block 2574) failed
[  429.341695] FAT-fs (loop3): Directory bread(block 2575) failed
[  429.351824] FAT-fs (loop3): Directory bread(block 2576) failed
[  429.361912] FAT-fs (loop3): Directory bread(block 2577) failed
[  429.372289] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:58 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002260af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:58 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7303", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  429.452424] FAT-fs (loop0): Directory bread(block 2569) failed
[  429.458510] FAT-fs (loop0): Directory bread(block 2570) failed
[  429.464616] FAT-fs (loop0): Directory bread(block 2571) failed
[  429.474631] FAT-fs (loop0): Directory bread(block 2572) failed
[  429.484671] FAT-fs (loop0): Directory bread(block 2573) failed
[  429.495017] FAT-fs (loop0): Directory bread(block 2574) failed
23:11:58 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:58 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xf0ffffffffffff, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:58 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x60, 0x0, 0x307)
close(r1)

23:11:58 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  429.505115] FAT-fs (loop0): Directory bread(block 2575) failed
[  429.515270] FAT-fs (loop0): Directory bread(block 2576) failed
[  429.525296] FAT-fs (loop0): Directory bread(block 2577) failed
[  429.535533] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:58 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  429.553750] FAT-fs (loop3): Directory bread(block 2569) failed
[  429.559821] FAT-fs (loop3): Directory bread(block 2570) failed
[  429.565870] FAT-fs (loop3): Directory bread(block 2571) failed
[  429.574218] FAT-fs (loop3): Directory bread(block 2572) failed
[  429.584306] FAT-fs (loop3): Directory bread(block 2573) failed
[  429.594402] FAT-fs (loop3): Directory bread(block 2574) failed
[  429.604539] FAT-fs (loop3): Directory bread(block 2575) failed
[  429.614670] FAT-fs (loop3): Directory bread(block 2576) failed
[  429.624680] FAT-fs (loop3): Directory bread(block 2577) failed
[  429.634986] FAT-fs (loop3): Directory bread(block 2578) failed
[  429.757395] FAT-fs (loop0): Directory bread(block 2569) failed
[  429.767680] FAT-fs (loop0): Directory bread(block 2570) failed
[  429.773799] FAT-fs (loop0): Directory bread(block 2571) failed
[  429.779969] FAT-fs (loop0): Directory bread(block 2572) failed
[  429.788250] FAT-fs (loop0): Directory bread(block 2573) failed
[  429.798559] FAT-fs (loop0): Directory bread(block 2574) failed
[  429.808625] FAT-fs (loop0): Directory bread(block 2575) failed
[  429.818701] FAT-fs (loop0): Directory bread(block 2576) failed
[  429.828769] FAT-fs (loop0): Directory bread(block 2577) failed
[  429.838873] FAT-fs (loop0): Directory bread(block 2578) failed
23:11:59 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xac14141b00000000}}, 0x1c)

23:11:59 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020c0af801", 0x17}], 0x0, &(0x7f0000000200))

23:11:59 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xff0f000000000000, 0x0, 0x307)
close(r1)

23:11:59 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x800e0000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:59 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:59 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:59 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:59 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f7304", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:59 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

[  430.094953] FAT-fs (loop3): Directory bread(block 2569) failed
[  430.105313] FAT-fs (loop3): Directory bread(block 2570) failed
[  430.113058] FAT-fs (loop5): bogus number of reserved sectors
[  430.116005] FAT-fs (loop3): Directory bread(block 2571) failed
[  430.118926] FAT-fs (loop5): Can't find a valid FAT filesystem
[  430.124939] FAT-fs (loop3): Directory bread(block 2572) failed
23:11:59 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x8848, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:11:59 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x89060000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:11:59 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:11:59 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002270af801", 0x17}], 0x0, &(0x7f0000000200))

[  430.141146] FAT-fs (loop3): Directory bread(block 2573) failed
[  430.151182] FAT-fs (loop3): Directory bread(block 2574) failed
[  430.161262] FAT-fs (loop3): Directory bread(block 2575) failed
[  430.171525] FAT-fs (loop3): Directory bread(block 2576) failed
[  430.181523] FAT-fs (loop3): Directory bread(block 2577) failed
[  430.187579] FAT-fs (loop3): Directory bread(block 2578) failed
23:11:59 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:11:59 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73de", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:11:59 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x14, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  430.318985] FAT-fs (loop3): Directory bread(block 2569) failed
[  430.325180] FAT-fs (loop3): Directory bread(block 2570) failed
[  430.331222] FAT-fs (loop3): Directory bread(block 2571) failed
[  430.339690] FAT-fs (loop3): Directory bread(block 2572) failed
[  430.349821] FAT-fs (loop3): Directory bread(block 2573) failed
[  430.359840] FAT-fs (loop3): Directory bread(block 2574) failed
[  430.370196] FAT-fs (loop3): Directory bread(block 2575) failed
[  430.380347] FAT-fs (loop3): Directory bread(block 2576) failed
[  430.390454] FAT-fs (loop3): Directory bread(block 2577) failed
[  430.400602] FAT-fs (loop3): Directory bread(block 2578) failed
23:12:00 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0xf4010000}}, 0x1c)

23:12:00 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0xffffdd86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:12:00 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:12:00 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xe020000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:12:00 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x2000000000000000, 0x0, 0x307)
close(r1)

23:12:00 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

23:12:00 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200020600f801", 0x17}], 0x0, &(0x7f0000000200))

23:12:00 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)="6d73646f73ff", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:12:00 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  430.922162] FAT-fs (loop3): Directory bread(block 2569) failed
[  430.928401] FAT-fs (loop3): Directory bread(block 2570) failed
[  430.942832] FAT-fs (loop3): Directory bread(block 2571) failed
[  430.948897] FAT-fs (loop3): Directory bread(block 2572) failed
[  430.955094] FAT-fs (loop3): Directory bread(block 2573) failed
[  430.963218] FAT-fs (loop3): Directory bread(block 2574) failed
23:12:00 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
sched_getparam(0x0, &(0x7f0000000440))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000006c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1f, 0x8, "1fe6a960e4ac23a75c52934fc438dcba49f560d6bc7527b6d44b311e04b3759bd1f3ff31e4e242a18a0feeb6649e8e940f85883601a527114daa8305b1c7fc76", "09adbbe82e566d1b4211c8d2bc9d612a2c12ee9e9c16f071bceca5f222e029d9f84a97ce7db7803e07519e747913b2df88c1e3f840755decc7a41a3d741961bd", "28d4f281790badff7e6996e28a385642f1c69896c602cc487a149d629b2ca1bf", [0x1ff, 0x7]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x17, 0x8, "272999ae4a0b7a769192e22fafec62936ce8c620393444da88f07dc951114f72a41f8729373a0e0e58bb40cb6e275e2363def2c3389ea9b6abbe6ccd856e731a", "8fdd51f1ab06c069394a902d5a2fad26c8891f10c2ffbaca0361c2cc449179a504bb9cc93b571ab02782321273039863c00952092e0483e5eb9b53328eb8d663", "981a18de614cbdfc74c262b5c9b54a3b73ad871eafa51d51f1a763fd0d2ee228", [0x7fff, 0x8]})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

23:12:00 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x8847, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:12:00 executing program 0:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200))

[  430.973580] FAT-fs (loop3): Directory bread(block 2575) failed
[  430.983653] FAT-fs (loop3): Directory bread(block 2576) failed
[  430.993887] FAT-fs (loop3): Directory bread(block 2577) failed
[  431.003853] FAT-fs (loop3): Directory bread(block 2578) failed
23:12:00 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200021e0af801", 0x17}], 0x0, &(0x7f0000000200))

23:12:00 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x1000000, 0x0, 0x307)
close(r1)

23:12:00 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:12:00 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x7}, 0xb)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x600}}, 0x1c)

23:12:00 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0xffffdd86, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:12:00 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdosL', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

[  431.112300] FAT-fs (loop0): Directory bread(block 2569) failed
[  431.118395] FAT-fs (loop0): Directory bread(block 2570) failed
[  431.125084] FAT-fs (loop0): Directory bread(block 2571) failed
[  431.133828] FAT-fs (loop0): Directory bread(block 2572) failed
23:12:00 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

[  431.205743] FAT-fs (loop3): Directory bread(block 2569) failed
[  431.222018] FAT-fs (loop3): Directory bread(block 2570) failed
[  431.228266] FAT-fs (loop3): Directory bread(block 2571) failed
[  431.234297] FAT-fs (loop3): Directory bread(block 2572) failed
[  431.242959] FAT-fs (loop3): Directory bread(block 2573) failed
23:12:00 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x2, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:12:00 executing program 3:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a020002200af801", 0x17}], 0x0, &(0x7f0000000200))

[  431.254103] FAT-fs (loop3): Directory bread(block 2574) failed
[  431.263075] FAT-fs (loop3): Directory bread(block 2575) failed
[  431.274164] FAT-fs (loop3): Directory bread(block 2576) failed
[  431.284198] FAT-fs (loop3): Directory bread(block 2577) failed
[  431.294405] FAT-fs (loop3): Directory bread(block 2578) failed
23:12:00 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x86ddffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000))

23:12:00 executing program 2:
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x88470000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

23:12:00 executing program 5:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

23:12:00 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0xffe0, 0x0, 0x307)
close(r1)

[  431.454057] FAT-fs (loop3): Directory bread(block 2569) failed
[  431.460189] FAT-fs (loop3): Directory bread(block 2570) failed
[  431.466376] FAT-fs (loop3): Directory bread(block 2571) failed
[  431.484842] FAT-fs (loop3): Directory bread(block 2572) failed
[  431.491206] FAT-fs (loop3): Directory bread(block 2573) failed
[  431.497237] FAT-fs (loop3): Directory bread(block 2574) failed
[  431.505561] FAT-fs (loop3): Directory bread(block 2575) failed
[  431.516048] FAT-fs (loop3): Directory bread(block 2576) failed
[  431.525740] FAT-fs (loop3): Directory bread(block 2577) failed
[  431.535899] FAT-fs (loop3): Directory bread(block 2578) failed
[  431.636001] FAT-fs (loop5): bogus number of reserved sectors
[  431.641910] FAT-fs (loop5): Can't find a valid FAT filesystem
[  434.145080] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  437.152496] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  440.161598] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  443.169498] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  446.178265] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  449.185510] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  452.193499] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  455.202652] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  458.210500] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  461.218983] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  464.227824] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  467.235499] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  470.243673] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  473.252711] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  476.260501] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  479.269166] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  482.276954] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  485.284503] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  488.292498] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  491.300811] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  494.308500] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  497.317187] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  500.325635] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  503.334148] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  506.342863] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  509.351771] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  512.359499] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  515.367501] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  518.376514] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  521.385159] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  524.392498] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  527.401695] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  530.409681] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  533.418721] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  536.426500] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  539.434500] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  542.442500] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  545.450586] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  548.458574] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  551.467615] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  554.476068] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  557.484258] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  560.491589] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  563.500432] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  566.508502] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  569.516546] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  572.524800] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  575.532499] syz-executor0(7883): getblk(): executed=9 bh_count=0 bh_state=0
[  575.803688] INFO: task syz-executor7:7893 blocked for more than 140 seconds.
[  575.810957]       Not tainted 4.18.0-rc7-next-20180801+ #29
[  575.816685] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  575.824663] syz-executor7   D24464  7893   4272 0x00000004
[  575.830298] Call Trace:
[  575.832911]  __schedule+0x87c/0x1ec0
[  575.836649]  ? trace_hardirqs_on+0x10/0x10
[  575.840879]  ? __sched_text_start+0x8/0x8
[  575.845021]  ? kasan_check_read+0x11/0x20
[  575.849167]  ? trace_hardirqs_on+0x10/0x10
[  575.853402]  ? compat_start_thread+0x80/0x80
[  575.857804]  ? trace_hardirqs_on+0x10/0x10
[  575.862040]  ? trace_hardirqs_on+0xd/0x10
[  575.866182]  ? _raw_spin_unlock_irq+0x27/0x70
[  575.870738]  ? finish_task_switch+0x18a/0x870
[  575.875242]  ? __switch_to_asm+0x34/0x70
[  575.879299]  schedule+0xfb/0x450
[  575.882675]  ? lock_downgrade+0x8f0/0x8f0
[  575.886846]  ? __schedule+0x1ec0/0x1ec0
[  575.890836]  ? kasan_check_read+0x11/0x20
[  575.894982]  ? do_raw_spin_unlock+0xa7/0x2f0
[  575.899400]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  575.903982]  ? kasan_check_write+0x14/0x20
[  575.908218]  ? do_raw_spin_lock+0xc1/0x200
[  575.912448]  rwsem_down_read_failed+0x362/0x610
[  575.917118]  ? rt_mutex_futex_unlock+0x130/0x130
[  575.921870]  ? find_inode.isra.20+0x1af/0x210
[  575.926365]  ? lock_downgrade+0x8f0/0x8f0
[  575.930513]  ? lock_acquire+0x1e4/0x540
[  575.934501]  ? __get_super.part.12+0x20f/0x2e0
[  575.939118]  ? check_same_owner+0x340/0x340
[  575.943441]  ? check_same_owner+0x340/0x340
[  575.947774]  ? _raw_spin_unlock+0x22/0x30
[  575.951922]  call_rwsem_down_read_failed+0x18/0x30
[  575.956843]  down_read+0xc3/0x1d0
[  575.960292]  ? __get_super.part.12+0x20f/0x2e0
[  575.965406]  ? __down_interruptible+0x700/0x700
[  575.970072]  ? do_raw_spin_unlock+0xa7/0x2f0
[  575.974480]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  575.979078]  ? lock_release+0xa30/0xa30
[  575.983060]  ? bdget+0x10a/0x5e0
[  575.986421]  ? bd_may_claim+0xd0/0xd0
[  575.990222]  __get_super.part.12+0x20f/0x2e0
[  575.994654]  get_super+0x2d/0x50
[  575.998016]  fsync_bdev+0x17/0xc0
[  576.001469]  invalidate_partition+0x35/0x60
[  576.005800]  drop_partitions.isra.13+0xe8/0x200
[  576.010465]  ? delete_partition+0x2c0/0x2c0
[  576.014802]  ? kasan_check_read+0x11/0x20
[  576.018951]  ? do_raw_spin_unlock+0xa7/0x2f0
[  576.023366]  rescan_partitions+0x75/0x910
[  576.027511]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  576.033044]  ? ns_capable_common+0x13f/0x170
[  576.037534]  __blkdev_reread_part+0x1ad/0x230
[  576.042023]  blkdev_reread_part+0x26/0x40
[  576.046173]  loop_reread_partitions+0x163/0x190
[  576.050853]  ? __loop_update_dio+0x6a0/0x6a0
[  576.055795]  loop_set_status+0xb95/0x1010
[  576.059938]  loop_set_status64+0xaa/0x100
[  576.064080]  ? loop_set_status_old+0x920/0x920
[  576.068666]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  576.074208]  ? ns_capable_common+0x13f/0x170
[  576.078629]  lo_ioctl+0x90e/0x1d70
[  576.082163]  ? trace_hardirqs_on+0xd/0x10
[  576.086304]  ? _raw_spin_unlock_irq+0x27/0x70
[  576.090802]  ? lo_rw_aio_complete+0x450/0x450
[  576.095290]  blkdev_ioctl+0x9cd/0x2030
[  576.099170]  ? lock_acquire+0x1e4/0x540
[  576.103136]  ? blkpg_ioctl+0xc40/0xc40
[  576.107020]  ? __switch_to_asm+0x40/0x70
[  576.111079]  ? lock_release+0xa30/0xa30
[  576.115049]  ? __switch_to_asm+0x34/0x70
[  576.119102]  ? __switch_to_asm+0x40/0x70
[  576.123153]  ? __switch_to_asm+0x34/0x70
[  576.127249]  ? __switch_to_asm+0x40/0x70
[  576.131325]  ? __schedule+0x884/0x1ec0
[  576.135225]  ? __fget+0x4d5/0x740
[  576.138782]  ? ksys_dup3+0x690/0x690
[  576.142502]  ? kasan_check_write+0x14/0x20
[  576.146746]  block_ioctl+0xee/0x130
[  576.150380]  ? blkdev_fallocate+0x400/0x400
[  576.154704]  do_vfs_ioctl+0x1de/0x1720
[  576.158591]  ? ioctl_preallocate+0x300/0x300
[  576.162999]  ? __fget_light+0x2f7/0x440
[  576.166978]  ? __schedule+0x1ec0/0x1ec0
[  576.170946]  ? fget_raw+0x20/0x20
[  576.174395]  ? __x64_sys_futex+0x47f/0x6a0
[  576.178648]  ? security_file_ioctl+0x94/0xc0
[  576.183069]  ksys_ioctl+0xa9/0xd0
[  576.186519]  __x64_sys_ioctl+0x73/0xb0
[  576.190423]  do_syscall_64+0x1b9/0x820
[  576.194307]  ? finish_task_switch+0x1d3/0x870
[  576.198803]  ? syscall_return_slowpath+0x5e0/0x5e0
[  576.203730]  ? syscall_return_slowpath+0x31d/0x5e0
[  576.208681]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  576.213701]  ? __switch_to_asm+0x34/0x70
[  576.217763]  ? __switch_to_asm+0x34/0x70
[  576.221815]  ? __switch_to_asm+0x40/0x70
[  576.225886]  ? __switch_to_asm+0x34/0x70
[  576.229943]  ? __switch_to_asm+0x40/0x70
[  576.234018]  ? __switch_to_asm+0x34/0x70
[  576.238085]  ? __switch_to_asm+0x40/0x70
[  576.242146]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  576.246994]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  576.252192] RIP: 0033:0x456a09
[  576.255384] Code: 24 00 00 00 e8 e8 4e fd ff 0f 0b e8 c1 34 00 00 e9 3c ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff <48> 3b 61 10 76 40 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b
[  576.274312] RSP: 002b:00007fa57c094c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  576.282029] RAX: ffffffffffffffda RBX: 00007fa57c0956d4 RCX: 0000000000456a09
[  576.289387] RDX: 0000000020000000 RSI: 0000000000004c04 RDI: 0000000000000013
[  576.296667] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000
[  576.303949] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  576.311302] R13: 00000000004ce4e0 R14: 00000000004c4d51 R15: 0000000000000001
[  576.318588] INFO: task blkid:7880 blocked for more than 140 seconds.
[  576.325080]       Not tainted 4.18.0-rc7-next-20180801+ #29
[  576.330796] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  576.338778] blkid           D20048  7880  13090 0x00000004
[  576.344417] Call Trace:
[  576.347013]  __schedule+0x87c/0x1ec0
[  576.350738]  ? __dentry_kill+0x51f/0x7a0
[  576.354801]  ? __sched_text_start+0x8/0x8
[  576.358951]  ? kasan_check_read+0x11/0x20
[  576.363101]  ? trace_hardirqs_on+0x10/0x10
[  576.367344]  ? __account_cfs_rq_runtime+0x770/0x770
[  576.372361]  ? native_queued_spin_lock_slowpath+0x1df/0x1220
[  576.378153]  ? lock_downgrade+0x8f0/0x8f0
[  576.382306]  ? lock_downgrade+0x8f0/0x8f0
[  576.386452]  schedule+0xfb/0x450
[  576.389821]  ? __mutex_lock+0xbf4/0x1700
[  576.393878]  ? __schedule+0x1ec0/0x1ec0
[  576.397855]  ? kasan_check_read+0x11/0x20
[  576.402012]  ? do_raw_spin_unlock+0xa7/0x2f0
[  576.406417]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  576.410996]  ? __ww_mutex_add_waiter.part.15+0x120/0x120
[  576.416445]  ? mutex_destroy+0x200/0x200
[  576.420504]  ? do_raw_spin_lock+0xc1/0x200
[  576.424741]  schedule_preempt_disabled+0x10/0x20
[  576.429503]  __mutex_lock+0xbf9/0x1700
[  576.433387]  ? blkdev_put+0x34/0x540
[  576.437098]  ? mutex_trylock+0x2b0/0x2b0
[  576.441157]  ? lock_downgrade+0x8f0/0x8f0
[  576.445296]  ? finish_task_switch+0x18a/0x870
[  576.449796]  ? trace_hardirqs_on+0x10/0x10
[  576.454035]  ? trace_hardirqs_on+0x10/0x10
[  576.458272]  ? kasan_check_write+0x14/0x20
[  576.462513]  ? finish_task_switch+0x2ca/0x870
[  576.467009]  ? __switch_to_asm+0x40/0x70
[  576.471082]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  576.476628]  ? locks_remove_posix+0x464/0x860
[  576.481123]  ? __switch_to_asm+0x40/0x70
[  576.485193]  ? __switch_to_asm+0x34/0x70
[  576.489283]  ? do_lock_file_wait.part.30+0x260/0x260
[  576.494411]  ? __switch_to_asm+0x34/0x70
[  576.498499]  ? __switch_to_asm+0x34/0x70
[  576.502571]  ? __switch_to_asm+0x34/0x70
[  576.506629]  ? __switch_to_asm+0x40/0x70
[  576.510693]  ? __schedule+0x884/0x1ec0
[  576.514575]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  576.520116]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  576.525661]  ? locks_remove_file+0x3df/0x590
[  576.530069]  ? fcntl_setlk+0x1010/0x1010
[  576.534124]  ? fsnotify_first_mark+0x350/0x350
[  576.538715]  ? blkdev_put+0x540/0x540
[  576.542512]  mutex_lock_nested+0x16/0x20
[  576.546572]  ? mutex_lock_nested+0x16/0x20
[  576.550804]  blkdev_put+0x34/0x540
[  576.554343]  ? blkdev_put+0x540/0x540
[  576.558134]  blkdev_close+0x8b/0xb0
[  576.561759]  __fput+0x376/0x8a0
[  576.565031]  ? __alloc_file+0x400/0x400
[  576.569004]  ? kasan_check_write+0x14/0x20
[  576.573229]  ? do_raw_spin_lock+0xc1/0x200
[  576.577463]  ____fput+0x15/0x20
[  576.580743]  task_work_run+0x1e8/0x2a0
[  576.584628]  ? task_work_cancel+0x240/0x240
[  576.588947]  ? copy_fd_bitmaps+0x210/0x210
[  576.593190]  exit_to_usermode_loop+0x318/0x380
[  576.597781]  ? syscall_slow_exit_work+0x500/0x500
[  576.602637]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  576.608179]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  576.613723]  do_syscall_64+0x6be/0x820
[  576.617604]  ? syscall_slow_exit_work+0x500/0x500
[  576.622443]  ? syscall_return_slowpath+0x5e0/0x5e0
[  576.627368]  ? syscall_return_slowpath+0x31d/0x5e0
[  576.632298]  ? prepare_exit_to_usermode+0x291/0x3b0
[  576.637309]  ? perf_trace_sys_enter+0xb10/0xb10
[  576.641976]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  576.646810]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  576.652006] RIP: 0033:0x7f1bf61d62b0
[  576.655715] Code: Bad RIP value.
[  576.659075] RSP: 002b:00007ffcac0f0df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  576.666777] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1bf61d62b0
[  576.674043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  576.681308] RBP: 0000000000000000 R08: 0000000000000018 R09: 0000000001680000
[  576.688594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000fbc030
[  576.695855] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005
[  576.703141] INFO: task syz-executor0:7882 blocked for more than 140 seconds.
[  576.710319]       Not tainted 4.18.0-rc7-next-20180801+ #29
[  576.716028] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  576.723988] syz-executor0   D25008  7882  29282 0x00000004
[  576.729633] Call Trace:
[  576.732220]  __schedule+0x87c/0x1ec0
[  576.735937]  ? __sched_text_start+0x8/0x8
[  576.740088]  ? do_raw_spin_lock+0xc1/0x200
[  576.744331]  ? migrate_swap_stop+0x850/0x850
[  576.748739]  ? kasan_check_write+0x14/0x20
[  576.752977]  ? __unqueue_futex+0x1f8/0x2e0
[  576.757205]  ? debug_object_destroy+0x2b0/0x2b0
[  576.761887]  ? lock_acquire+0x1e4/0x540
[  576.765862]  ? futex_wake+0x615/0x760
[  576.769668]  ? lock_downgrade+0x8f0/0x8f0
[  576.773819]  schedule+0xfb/0x450
[  576.777180]  ? __mutex_lock+0xbf4/0x1700
[  576.781233]  ? __schedule+0x1ec0/0x1ec0
[  576.785214]  ? kasan_check_read+0x11/0x20
[  576.789356]  ? do_raw_spin_unlock+0xa7/0x2f0
[  576.793767]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  576.798343]  ? __ww_mutex_add_waiter.part.15+0x120/0x120
[  576.803798]  ? mutex_destroy+0x200/0x200
[  576.807852]  ? do_raw_spin_lock+0xc1/0x200
[  576.812086]  schedule_preempt_disabled+0x10/0x20
[  576.816837]  __mutex_lock+0xbf9/0x1700
[  576.820737]  ? blkdev_put+0x34/0x540
[  576.824447]  ? trace_hardirqs_on+0x10/0x10
[  576.828693]  ? mutex_trylock+0x2b0/0x2b0
[  576.832762]  ? trace_hardirqs_on+0x10/0x10
[  576.837000]  ? do_futex+0x249/0x27d0
[  576.840720]  ? wake_up_new_task+0x6ce/0xd00
[  576.845042]  ? exit_robust_list+0x290/0x290
[  576.849355]  ? kasan_check_read+0x11/0x20
[  576.853502]  ? do_raw_spin_unlock+0xa7/0x2f0
[  576.857910]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  576.863450]  ? locks_remove_posix+0x464/0x860
[  576.867950]  ? lock_repin_lock+0x430/0x430
[  576.872189]  ? do_lock_file_wait.part.30+0x260/0x260
[  576.877289]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  576.882834]  ? should_fail+0x246/0xd86
[  576.886723]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  576.892267]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  576.897805]  ? locks_remove_file+0x3df/0x590
[  576.902218]  ? fcntl_setlk+0x1010/0x1010
[  576.906274]  ? fsnotify_first_mark+0x350/0x350
[  576.910859]  ? blkdev_put+0x540/0x540
[  576.914651]  mutex_lock_nested+0x16/0x20
[  576.918707]  ? mutex_lock_nested+0x16/0x20
[  576.922933]  blkdev_put+0x34/0x540
[  576.926477]  ? blkdev_put+0x540/0x540
[  576.930283]  blkdev_close+0x8b/0xb0
[  576.933908]  __fput+0x376/0x8a0
[  576.937188]  ? __alloc_file+0x400/0x400
[  576.941165]  ? kasan_check_write+0x14/0x20
[  576.945398]  ? do_raw_spin_lock+0xc1/0x200
[  576.949640]  ____fput+0x15/0x20
[  576.952912]  task_work_run+0x1e8/0x2a0
[  576.956815]  ? task_work_cancel+0x240/0x240
[  576.961137]  ? copy_fd_bitmaps+0x210/0x210
[  576.965371]  exit_to_usermode_loop+0x318/0x380
[  576.969950]  ? syscall_slow_exit_work+0x500/0x500
[  576.974793]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  576.980324]  do_syscall_64+0x6be/0x820
[  576.984210]  ? syscall_slow_exit_work+0x500/0x500
[  576.989046]  ? syscall_return_slowpath+0x5e0/0x5e0
[  576.993984]  ? syscall_return_slowpath+0x31d/0x5e0
[  576.998911]  ? prepare_exit_to_usermode+0x291/0x3b0
[  577.003933]  ? perf_trace_sys_enter+0xb10/0xb10
[  577.008597]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  577.013447]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  577.018643] RIP: 0033:0x4105c1
[  577.021840] Code: 16 00 00 00 e8 30 b3 01 00 0f 0b 48 89 54 24 18 66 89 44 24 16 e8 bf bc 01 00 48 8d 05 ef ec 4b 00 48 89 04 24 48 c7 44 24 08 <16> 00 00 00 e8 46 c6 01 00 e8 f1 be 01 00 0f b7 44 24 16 0f b7 c0
[  577.040749] RSP: 002b:00007fff6418dd40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  577.048483] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 00000000004105c1
[  577.055756] RDX: 0000000000000000 RSI: 0000000000730390 RDI: 0000000000000014
[  577.063026] RBP: 0000000000000010 R08: 00000000000000a0 R09: ffffffffffffffff
[  577.070295] R10: 0000000000930140 R11: 0000000000000293 R12: 0000000000000000
[  577.077566] R13: 0000000000069326 R14: 0000000000000120 R15: badc0ffeebadface
[  577.084852] INFO: task syz-executor0:7952 blocked for more than 140 seconds.
[  577.092037]       Not tainted 4.18.0-rc7-next-20180801+ #29
[  577.097734] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  577.105708] syz-executor0   D24840  7952  29282 0x00000004
[  577.111342] Call Trace:
[  577.113931]  __schedule+0x87c/0x1ec0
[  577.117645]  ? __sched_text_start+0x8/0x8
[  577.121796]  ? trace_hardirqs_on+0x10/0x10
[  577.126046]  ? __lru_cache_add+0x2a4/0x460
[  577.130281]  ? lock_acquire+0x1e4/0x540
[  577.134250]  ? kobj_lookup+0x2a4/0x460
[  577.138134]  ? lock_release+0xa30/0xa30
[  577.142098]  schedule+0xfb/0x450
[  577.145462]  ? __mutex_lock+0xbf4/0x1700
[  577.149517]  ? __schedule+0x1ec0/0x1ec0
[  577.153501]  ? kasan_check_read+0x11/0x20
[  577.157648]  ? do_raw_spin_unlock+0xa7/0x2f0
[  577.162048]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  577.166628]  ? __ww_mutex_add_waiter.part.15+0x120/0x120
[  577.172069]  ? mutex_destroy+0x200/0x200
[  577.176137]  ? do_raw_spin_lock+0xc1/0x200
[  577.180372]  schedule_preempt_disabled+0x10/0x20
[  577.185138]  __mutex_lock+0xbf9/0x1700
[  577.189022]  ? __blkdev_get+0x19b/0x13c0
[  577.193086]  ? mutex_trylock+0x2b0/0x2b0
[  577.197140]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  577.202677]  ? lock_release+0xa30/0xa30
[  577.206651]  ? legitimize_mnt+0x240/0x240
[  577.210808]  ? lock_acquire+0x1e4/0x540
[  577.214780]  ? get_gendisk+0x78/0x380
[  577.218574]  ? m_show+0x5d0/0x5d0
[  577.222034]  ? check_same_owner+0x340/0x340
[  577.226355]  ? lock_downgrade+0x8f0/0x8f0
[  577.230499]  ? rcu_note_context_switch+0x730/0x730
[  577.235436]  ? get_gendisk+0xd2/0x380
[  577.239240]  ? lock_downgrade+0x8f0/0x8f0
[  577.243385]  ? get_gendisk+0x78/0x380
[  577.247177]  ? __down_interruptible+0x700/0x700
[  577.251854]  ? kobj_lookup+0x36a/0x460
[  577.255744]  mutex_lock_nested+0x16/0x20
[  577.259819]  ? mutex_lock_nested+0x16/0x20
[  577.264055]  __blkdev_get+0x19b/0x13c0
[  577.267953]  ? path_init+0x1fc0/0x1fc0
[  577.271847]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  577.276876]  ? set_root+0x42e/0x820
[  577.280496]  ? blkdev_get_block+0xc0/0xc0
[  577.284650]  blkdev_get+0xc1/0xb50
[  577.288192]  ? bdget+0x5e0/0x5e0
[  577.291567]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  577.296149]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  577.301694]  ? errseq_sample+0xe5/0x130
[  577.305668]  ? _copy_to_user+0x110/0x110
[  577.309734]  ? _raw_spin_unlock+0x22/0x30
[  577.313879]  blkdev_open+0x1fb/0x280
[  577.317601]  do_dentry_open+0x49c/0x1140
[  577.321656]  ? __devcgroup_check_permission+0x280/0x4d0
[  577.327016]  ? bd_acquire+0x2c0/0x2c0
[  577.330813]  ? chown_common+0x730/0x730
[  577.334787]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  577.340333]  ? security_inode_permission+0xd2/0x100
[  577.345349]  ? inode_permission+0xb2/0x560
[  577.349578]  vfs_open+0xa0/0xd0
[  577.352857]  path_openat+0x12fb/0x5300
[  577.356739]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  577.361420]  ? path_lookupat.isra.45+0xc00/0xc00
[  577.366182]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  577.371197]  ? expand_files.part.8+0x571/0x9c0
[  577.375777]  ? iterate_fd+0x4b0/0x4b0
[  577.379586]  ? lock_acquire+0x1e4/0x540
[  577.383557]  ? __alloc_fd+0x34e/0x710
[  577.387356]  ? lock_downgrade+0x8f0/0x8f0
[  577.391498]  ? do_sys_open+0x3a2/0x720
[  577.395386]  ? kasan_check_read+0x11/0x20
[  577.399528]  ? do_raw_spin_unlock+0xa7/0x2f0
[  577.403936]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  577.408512]  ? kasan_check_write+0x14/0x20
[  577.412744]  ? do_raw_spin_lock+0xc1/0x200
[  577.416980]  ? _raw_spin_unlock+0x22/0x30
[  577.421129]  ? __alloc_fd+0x34e/0x710
[  577.424918]  ? usercopy_warn+0x120/0x120
[  577.428976]  do_filp_open+0x255/0x380
[  577.432765]  ? may_open_dev+0x100/0x100
[  577.436744]  ? get_unused_fd_flags+0x122/0x1a0
[  577.441318]  ? __alloc_fd+0x710/0x710
[  577.445117]  do_sys_open+0x584/0x720
[  577.448823]  ? filp_open+0x80/0x80
[  577.452357]  ? do_sys_ftruncate+0x44e/0x560
[  577.456667]  __x64_sys_open+0x7e/0xc0
[  577.460475]  do_syscall_64+0x1b9/0x820
[  577.464363]  ? finish_task_switch+0x1d3/0x870
[  577.468857]  ? syscall_return_slowpath+0x5e0/0x5e0
[  577.473777]  ? syscall_return_slowpath+0x31d/0x5e0
[  577.478713]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  577.483728]  ? __switch_to_asm+0x34/0x70
[  577.487786]  ? __switch_to_asm+0x34/0x70
[  577.491842]  ? __switch_to_asm+0x40/0x70
[  577.495909]  ? __switch_to_asm+0x34/0x70
[  577.499971]  ? __switch_to_asm+0x40/0x70
[  577.504040]  ? __switch_to_asm+0x34/0x70
[  577.508098]  ? __switch_to_asm+0x40/0x70
[  577.512160]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  577.516997]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  577.522182] RIP: 0033:0x410741
[  577.525373] Code: 8b 51 30 48 8b 92 98 00 00 00 48 85 d2 0f 84 3f 07 00 00 48 8b 8a 68 01 00 00 48 29 c1 48 89 8a 68 01 00 00 48 85 c9 0f 8c 0d <07> 00 00 64 48 8b 04 25 f8 ff ff ff 48 8b 48 30 8b 99 d8 00 00 00
[  577.544289] RSP: 002b:00007f67699daa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  577.551990] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 0000000000410741
[  577.559259] RDX: 00007f67699daafa RSI: 0000000000000002 RDI: 00007f67699daaf0
[  577.566520] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a
[  577.573786] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003
[  577.581045] R13: 0000000000000001 R14: 00000000004c8f38 R15: 0000000000000001
[  577.588318] INFO: lockdep is turned off.
[  577.592374] NMI backtrace for cpu 1
[  577.595999] CPU: 1 PID: 774 Comm: khungtaskd Not tainted 4.18.0-rc7-next-20180801+ #29
[  577.604032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  577.613361] Call Trace:
[  577.615937]  dump_stack+0x1c9/0x2b4
[  577.619551]  ? dump_stack_print_info.cold.2+0x52/0x52
[  577.624722]  ? vprintk_default+0x28/0x30
[  577.628762]  ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f
[  577.633931]  nmi_cpu_backtrace.cold.3+0x48/0x88
[  577.638578]  ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f
[  577.643752]  nmi_trigger_cpumask_backtrace+0x151/0x192
[  577.649007]  arch_trigger_cpumask_backtrace+0x14/0x20
[  577.654176]  watchdog+0xb39/0x10b0
[  577.657698]  ? reset_hung_task_detector+0xd0/0xd0
[  577.662518]  ? kasan_check_read+0x11/0x20
[  577.666645]  ? do_raw_spin_unlock+0xa7/0x2f0
[  577.671031]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  577.676111]  ? __kthread_parkme+0x58/0x1b0
[  577.680326]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  577.685320]  ? trace_hardirqs_on+0xd/0x10
[  577.689451]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  577.694967]  ? __kthread_parkme+0x106/0x1b0
[  577.699266]  kthread+0x35a/0x420
[  577.702612]  ? reset_hung_task_detector+0xd0/0xd0
[  577.707429]  ? kthread_bind+0x40/0x40
[  577.711210]  ret_from_fork+0x3a/0x50
[  577.714953] Sending NMI from CPU 1 to CPUs 0:
[  577.720081] NMI backtrace for cpu 0
[  577.720085] CPU: 0 PID: 7883 Comm: syz-executor0 Not tainted 4.18.0-rc7-next-20180801+ #29
[  577.720090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  577.720092] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x50
[  577.720100] Code: e2 00 01 1f 00 48 8b 75 08 75 2b 8b 90 88 12 00 00 83 fa 02 75 20 48 8b 88 90 12 00 00 8b 80 8c 12 00 00 48 8b 11 48 83 c2 01 <48> 39 d0 76 07 48 89 34 d1 48 89 11 5d c3 0f 1f 00 55 40 0f b6 d6
[  577.720103] RSP: 0018:ffff88018f98f220 EFLAGS: 00000216
[  577.720108] RAX: 0000000000040000 RBX: ffff8801cc4a42a0 RCX: ffffc90012bb2000
[  577.720112] RDX: 0000000000040000 RSI: ffffffff81d6e392 RDI: 0000000000000007
[  577.720115] RBP: ffff88018f98f220 R08: ffff880188e1e3c0 R09: ffffed0031f31d99
[  577.720118] R10: ffffed0031f31d99 R11: 0000000000000003 R12: dffffc0000000000
[  577.720122] R13: 0000000000000a09 R14: 0000000000000000 R15: 0000000000000020
[  577.720125] FS:  00007f67699fc700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000
[  577.720128] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  577.720131] CR2: ffffffffff600400 CR3: 00000001d8e6f000 CR4: 00000000001406f0
[  577.720135] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  577.720138] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  577.720140] Call Trace:
[  577.720142]  init_page_buffers+0x3e2/0x530
[  577.720145]  ? mark_buffer_dirty+0x6d0/0x6d0
[  577.720147]  ? __getblk_gfp+0x8af/0xe00
[  577.720149]  __getblk_gfp+0xb50/0xe00
[  577.720151]  ? rcu_is_watching+0x8c/0x150
[  577.720153]  ? __find_get_block+0xe60/0xe60
[  577.720156]  ? vprintk_func+0x81/0x117
[  577.720157]  ? printk+0xa7/0xcf
[  577.720160]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  577.720162]  ? kasan_check_read+0x11/0x20
[  577.720164]  ? do_raw_spin_unlock+0xa7/0x2f0
[  577.720167]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  577.720169]  ? fat_msg+0x11a/0x15c
[  577.720171]  ? fat_sync_bhs+0x1f0/0x1f0
[  577.720173]  ? ___ratelimit+0xaa/0x655
[  577.720175]  ? kasan_slab_alloc+0x12/0x20
[  577.720177]  ? idr_get_free+0x10d0/0x10d0
[  577.720179]  ? lockdep_init_map+0x9/0x10
[  577.720181]  __bread_gfp+0x2d/0x310
[  577.720183]  fat__get_entry+0x59c/0xa30
[  577.720185]  ? __put_user_ns+0x60/0x60
[  577.720187]  ? lock_downgrade+0x8f0/0x8f0
[  577.720189]  ? copy_overflow+0x30/0x30
[  577.720192]  ? inode_sb_list_add+0x215/0x300
[  577.720194]  ? lock_downgrade+0x8f0/0x8f0
[  577.720196]  fat_get_short_entry+0x13c/0x2c0
[  577.720198]  fat_subdirs+0x13c/0x290
[  577.720200]  ? fat_ioctl_filldir+0x580/0x580
[  577.720202]  ? _raw_spin_unlock+0x22/0x30
[  577.720205]  ? inode_sb_list_add+0x215/0x300
[  577.720207]  ? evict_inodes+0x610/0x610
[  577.720209]  ? no_open+0x10/0x10
[  577.720211]  ? _raw_spin_unlock+0x22/0x30
[  577.720213]  fat_fill_super+0x29f6/0x4430
[  577.720215]  ? fat_flush_inodes+0x1a0/0x1a0
[  577.720218]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  577.720220]  ? vsnprintf+0x20d/0x1b60
[  577.720222]  ? pointer+0x990/0x990
[  577.720224]  ? snprintf+0xae/0xe0
[  577.720226]  ? vsprintf+0x40/0x40
[  577.720228]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  577.720230]  ? set_blocksize+0x2c1/0x340
[  577.720232]  msdos_fill_super+0x2e/0x40
[  577.720234]  mount_bdev+0x314/0x3e0
[  577.720236]  ? msdos_mount+0x50/0x50
[  577.720238]  msdos_mount+0x3c/0x50
[  577.720240]  ? setup+0xe0/0xe0
[  577.720242]  legacy_get_tree+0x131/0x460
[  577.720244]  vfs_get_tree+0x1cb/0x5c0
[  577.720246]  ? vfs_set_fs_source+0x12c/0x180
[  577.720248]  do_mount+0x6f2/0x1e20
[  577.720251]  ? check_same_owner+0x340/0x340
[  577.720253]  ? lock_release+0xa30/0xa30
[  577.720255]  ? copy_mount_string+0x40/0x40
[  577.720257]  ? retint_kernel+0x10/0x10
[  577.720259]  ? copy_mount_options+0x1f0/0x380
[  577.720262]  ? __sanitizer_cov_trace_pc+0x48/0x50
[  577.720264]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  577.720267]  ? copy_mount_options+0x285/0x380
[  577.720269]  ksys_mount+0x12d/0x140
[  577.720271]  __x64_sys_mount+0xbe/0x150
[  577.720273]  do_syscall_64+0x1b9/0x820
[  577.720275]  ? syscall_return_slowpath+0x5e0/0x5e0
[  577.720278]  ? syscall_return_slowpath+0x31d/0x5e0
[  577.720280]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  577.720282]  ? __switch_to_asm+0x34/0x70
[  577.720284]  ? __switch_to_asm+0x34/0x70
[  577.720286]  ? __switch_to_asm+0x40/0x70
[  577.720288]  ? __switch_to_asm+0x34/0x70
[  577.720291]  ? __switch_to_asm+0x34/0x70
[  577.720293]  ? __switch_to_asm+0x40/0x70
[  577.720295]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  577.720298]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  577.720299] RIP: 0033:0x45943a
[  577.720307] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00
[  577.720310] RSP: 002b:00007f67699fba88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  577.720315] RAX: ffffffffffffffda RBX: 00007f67699fbb30 RCX: 000000000045943a
[  577.720319] RDX: 00007f67699fbad0 RSI: 00000000200003c0 RDI: 00007f67699fbaf0
[  577.720322] RBP: 00000000200003c0 R08: 00007f67699fbb30 R09: 00007f67699fbad0
[  577.720326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000013
[  577.720329] R13: 0000000000000000 R14: 00000000004c8f38 R15: 0000000000000000
[  577.720460] Kernel panic - not syncing: hung_task: blocked tasks
[  578.218497] CPU: 1 PID: 774 Comm: khungtaskd Not tainted 4.18.0-rc7-next-20180801+ #29
[  578.226535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  578.235873] Call Trace:
[  578.238464]  dump_stack+0x1c9/0x2b4
[  578.242089]  ? dump_stack_print_info.cold.2+0x52/0x52
[  578.247281]  ? printk_safe_log_store+0x2f0/0x2f0
[  578.252035]  panic+0x238/0x4e7
[  578.255262]  ? add_taint.cold.5+0x16/0x16
[  578.259410]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  578.264947]  ? nmi_trigger_cpumask_backtrace+0x13a/0x192
[  578.270394]  ? printk_safe_flush+0xd7/0x130
[  578.274714]  watchdog+0xb4a/0x10b0
[  578.278260]  ? reset_hung_task_detector+0xd0/0xd0
[  578.283105]  ? kasan_check_read+0x11/0x20
[  578.287250]  ? do_raw_spin_unlock+0xa7/0x2f0
[  578.291648]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  578.296732]  ? __kthread_parkme+0x58/0x1b0
[  578.300961]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  578.305959]  ? trace_hardirqs_on+0xd/0x10
[  578.310103]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  578.315623]  ? __kthread_parkme+0x106/0x1b0
[  578.319941]  kthread+0x35a/0x420
[  578.323310]  ? reset_hung_task_detector+0xd0/0xd0
[  578.328133]  ? kthread_bind+0x40/0x40
[  578.331930]  ret_from_fork+0x3a/0x50
[  578.336084] Dumping ftrace buffer:
[  578.339616]    (ftrace buffer empty)
[  578.343356] Kernel Offset: disabled
[  578.346962] Rebooting in 86400 seconds..